ZyXEL Communications USG-100@USG-200 - V2.20 ED 2

To Next Page

To Previous Page

Chapter 25 IPSec VPN

ZyWALL USG 100/200 Series User’s Guide

496

Figure 359 Configuration > VPN > IPSec VPN > VPN Gateway > Edit

Main Page

About this User's Guide3
Document Conventions6
- Syntax Conventions6
Safety Warnings8
Contents Overview9
- Table of Contents9
Table of Contents11
User's Guide31
PART I User's Guide31
Chapter 1 Introducing the Zywall33
- Overview and Key Default Settings33
- Rack-Mounted Installation34
  - Rack-Mounted Installation Procedure34
- Front Panel35
  - Front Panel Leds36
- Management Overview36
- Starting and Stopping the Zywall38
Chapter 2 Features and Applications39
- Features39
- Applications41
- Web Configurator47
Chapter 3 Web Configurator47
- Web Configurator Requirements47
- Web Configurator Access47
- Web Configurator Screens Overview49
- Ssl Vpn54
Chapter 4 Installation Setup Wizard65
- Installation Setup Wizard Screens65
- Device Registration72
- Quick Setup75
Chapter 5 Quick Setup75
- Quick Setup Overview75
- WAN Interface Quick Setup76
- VPN Quick Setup81
- VPN Setup Wizard: Wizard Type82
- VPN Express Wizard - Scenario83
Chapter 6 Configuration Basics93
- Object-Based Configuration93
- Zones, Interfaces, and Physical Ports94
  - Interface Types95
  - Default Interface and Zone Configuration96
- Terminology in the Zywall97
- Packet Flow99
- Feature Configuration Overview102
- Objects113
  - User/Group113
- System114
Chapter 7 Tutorials117
- How to Configure Interfaces, Port Roles, and Zones117
  - Configure a WAN Ethernet Interface118
- Configure the OPT Interface for a Local Network119
- Configure Zones120
- Configure Port Roles121
- How to Configure a Cellular Interface122
- How to Configure Load Balancing124
  - Set up Available Bandwidth on Ethernet Interfaces124
  - Configure the WAN Trunk125
- How to Set up a Wireless LAN127
- How to Set up an Ipsec VPN Tunnel143
- How to Configure a Hub-And-Spoke Ipsec VPN Without a VPN Concentrator146
- How to Configure User-Aware Access Control148
- How to Use a RADIUS Server to Authenticate User Accounts Based on Groups157
- How to Use Endpoint Security and Authentication Policies159
  - Configure the Endpoint Security Objects159
  - Configure the Authentication Policy161
- How to Configure Service Control162
  - Allow HTTPS Administrator Access Only from the LAN163
- How to Allow Incoming H.323 Peer-To-Peer Calls165
- How to Allow Public Access to a Web Server169
- How to Use an IPPBX on the DMZ172
Chapter 8 L2TP VPN Example187
- Configuring the Default L2TP VPN Gateway Example187
- Configuring the Default L2TP VPN Connection Example189
- Configuring the L2TP VPN Settings Example190
- Configuring L2TP VPN in Windows Vista, XP, or 2000191
Technical Reference225
Part II: Technical Reference225
- Dashboard227
Chapter 9 Dashboard227
- Overview227
  - What You Can Do in this Chapter227
- The Dashboard Screen227
Chapter 10 Monitor241
- Overview241
  - What You Can Do in this Chapter241
- The Port Statistics Screen242
  - The Port Statistics Graph Screen244
- Interface Status Screen245
- The Traffic Statistics Screen248
- The Session Monitor Screen251
- The DDNS Status Screen254
- IP/MAC Binding Monitor254
- The Login Users Screen256
- WLAN Interface Station Monitor Screen256
- Cellular Status Screen258
- USB Storage Screen260
- Application Patrol Statistics261
  - Application Patrol Statistics: General Setup261
  - Application Patrol Statistics: Bandwidth Statistics262
  - Application Patrol Statistics: Protocol Statistics263
  - Application Patrol Statistics: Individual Protocol Statistics by Rule264
- The Ipsec Monitor Screen265
  - Regular Expressions in Searching Ipsec Sas267
- The SSL Connection Monitor Screen268
- L2TP over Ipsec Session Monitor Screen269
- The Anti-Virus Statistics Screen270
- The IDP Statistics Screen272
- The Content Filter Statistics Screen274
- Content Filter Cache Screen275
- The Anti-Spam Statistics Screen278
- The Anti-Spam Status Screen280
- Log Screen281
- Registration285
Chapter 11 Registration285
- Overview285
  - What You Can Do in this Chapter285
  - What You Need to Know285
- The Registration Screen287
- The Service Screen289
Chapter 12 Signature Update291
- Overview291
  - What You Can Do in this Chapter291
  - What You Need to Know291
- The Antivirus Update Screen292
- The Idp/Apppatrol Update Screen293
- The System Protect Update Screen295
Chapter 13 Interfaces297
- Interface Overview297
- Add336
Chapter 14 Trunks373
- Overview373
Chapter 15 Policy and Static Routes383
- Policy and Static Routes Overview383
  - What You Can Do in this Chapter383
  - What You Need to Know384
- Policy Route Screen386
  - Policy Route Edit Screen389
- IP Static Route Screen393
  - Static Route Add/Edit Screen394
- Policy Routing Technical Reference395
  - Port Triggering396
  - Maximize Bandwidth Usage397
Chapter 16 Routing Protocols399
- Routing Protocols Overview399
  - What You Can Do in this Chapter399
  - What You Need to Know399
- The RIP Screen400
- The OSPF Screen401
- Routing Protocol Technical Reference410
Chapter 17 Zones413
- Zones Overview413
  - What You Can Do in this Chapter413
  - What You Need to Know414
- The Zone Screen415
- Zone Edit416
- Ddns417
Chapter 18 DDNS417
- DDNS Overview417
  - What You Can Do in this Chapter417
  - What You Need to Know417
- The DDNS Screen418
  - The Dynamic DNS Add/Edit Screen420
- Nat423
Chapter 19 NAT423
- NAT Overview423
  - What You Can Do in this Chapter423
  - What You Need to Know424
- The NAT Screen424
  - The NAT Add/Edit Screen426
- NAT Technical Reference429
  - HTTP Redirect433
Chapter 20 HTTP Redirect433
- Overview433
  - What You Can Do in this Chapter433
  - What You Need to Know434
- The HTTP Redirect Screen435
  - The HTTP Redirect Edit Screen436
- Alg439
Chapter 21 ALG439
- ALG Overview439
- The ALG Screen443
- ALG Technical Reference445
  - IP/MAC Binding447
Chapter 22 IP/MAC Binding447
- IP/MAC Binding Overview447
  - What You Can Do in this Chapter447
  - What You Need to Know448
- IP/MAC Binding Summary448
  - IP/MAC Binding Edit449
  - Static DHCP Edit450
- IP/MAC Binding Exempt List451
Chapter 23 Authentication Policy453
- Overview453
  - What You Can Do in this Chapter453
  - What You Need to Know454
- Authentication Policy Screen454
- Edit455
Chapter 24 Firewall461
- Overview461
- The Firewall Screen469
  - Configuring the Firewall Screen470
  - The Firewall Add/Edit Screen473
- The Session Limit Screen474
  - The Session Limit Add/Edit Screen476
Chapter 25 Ipsec VPN479
- Ipsec VPN Overview479
- The VPN Connection Screen482
  - The VPN Connection Add/Edit (IKE) Screen484
  - The VPN Connection Add/Edit Manual Key Screen491
- The VPN Gateway Screen494
  - The VPN Gateway Add/Edit Screen495
- VPN Concentrator503
- Ipsec VPN Background Information507
  - Ike Sa Overview508
  - Ipsec Sa Overview514
- Ssl Vpn521
Chapter 26 SSL VPN521
- Overview521
- The SSL Access Privilege Screen524
  - The SSL Access Policy Add/Edit Screen526
  - Access Policy528
- The SSL Global Setting Screen529
  - How to Upload a Custom Logo531
- Establishing an SSL VPN Connection532
- SSL User Screens535
Chapter 27 SSL User Screens535
- Overview535
  - What You Need to Know535
- Remote User Login536
- The SSL VPN User Screens541
- Bookmarking the Zywall542
- Logging out of the SSL VPN User Screens542
Chapter 28 SSL User Application Screens545
- SSL User Application Screens Overview545
- The Application Screen545
- SSL User File Sharing547
Chapter 29 SSL User File Sharing547
- Overview547
  - What You Need to Know547
- The Main File Sharing Screen548
- Opening a File or Folder548
  - Downloading a File550
  - Saving a File551
- Creating a New Folder551
- Renaming a File or Folder552
- Deleting a File or Folder552
- Uploading a File553
Chapter 30 Zywall Secuextender555
- The Zywall Secuextender Icon555
- Statistics556
- View Log557
- Suspend and Resume the Connection557
- Stop the Connection558
- Uninstalling the Zywall Secuextender558
Chapter 31 L2TP VPN559
- Overview559
  - What You Can Do in this Chapter559
  - What You Need to Know559
- L2TP VPN Screen561
Chapter 32 Application Patrol563
- Overview563
Chapter 33 Anti-Virus589
- Overview589
Chapter 34 IDP605
- Overview605
Chapter 35 ADP641
- Overview641
Chapter 36 Content Filtering663
- Overview663
Chapter 37 Content Filter Reports687
- Overview687
- Viewing Content Filter Reports687
Chapter 38 Anti-Spam695
- Overview695
  - What You Can Do in this Chapter695
  - What You Need to Know695
- Before You Begin697
- The Anti-Spam General Screen697
  - Anti-Spam698
  - The Anti-Spam Policy Add or Edit Screen699
- The Anti-Spam Black List Screen701
  - The Anti-Spam Black or White List Add/Edit Screen703
  - Regular Expressions in Black or White List Entries704
- The Anti-Spam White List Screen705
- The DNSBL Screen706
- Anti-Spam Technical Reference708
Chapter 39 Device HA713
- Overview713
- Device HA General715
- The Active-Passive Mode Screen716
  - Configuring Active-Passive Mode Device HA718
  - Synchronization720
- Port Number720
Chapter 40 User/Group735
- Overview735
  - What You Can Do in this Chapter735
  - What You Need to Know735
- User Summary Screen738
  - User Add/Edit Screen738
- User Group Summary Screen741
  - Group Add/Edit Screen742
- Setting Screen743
  - Default User Authentication Timeout Settings Edit Screens746
  - User Aware Login Example748
- User /Group Technical Reference749
  - Addresses751
Chapter 41 Addresses751
- Overview751
  - What You Can Do in this Chapter751
  - What You Need to Know751
- Address Summary Screen751
  - Address Add/Edit Screen753
- Address Group Summary Screen754
  - Address Group Add/Edit Screen755
- Services757
Chapter 42 Services757
- Overview757
  - What You Can Do in this Chapter757
  - What You Need to Know757
- The Service Summary Screen758
  - The Service Add/Edit Screen760
- The Service Group Summary Screen760
  - The Service Group Add/Edit Screen762
- Schedules763
Chapter 43 Schedules763
- Overview763
  - What You Can Do in this Chapter763
  - What You Need to Know763
- The Schedule Summary Screen764
Chapter 44 AAA Server769
- Overview769
- Active Directory or LDAP Server Summary773
  - Adding an Active Directory or LDAP Server773
- RADIUS Server Summary775
  - Adding a RADIUS Server777
Chapter 45 Authentication Method779
- Overview779
- Authentication Method Objects780
  - Creating an Authentication Method Object781
- Certificates785
Chapter 46 Certificates785
- Overview785
- The My Certificates Screen789
- The Trusted Certificates Screen799
  - The Trusted Certificates Edit Screen800
  - The Trusted Certificates Import Screen804
- Certificates Technical Reference805
Chapter 47 ISP Accounts807
- Overview807
  - What You Can Do in this Chapter807
- ISP Account Summary807
  - ISP Account Edit808
  - Stac Compression810
Chapter 48 SSL Application811
- Overview811
- The SSL Application Screen813
  - Creating/Editing a Web-Based SSL Application Object814
  - Creating/Editing a File Sharing SSL Application Object816
Chapter 49819
- Endpoint Security819
Chapter 50 System829
- Overview829
  - What You Can Do in this Chapter829
- Host Name830
System Name830
- USB Storage831
- Date and Time832
  - Pre-Defined NTP Time Servers List834
  - Time Server Synchronization835
- Console Port Speed836
- DNS Overview836
- WWW Overview844
- Ssh861
- Telnet866
  - Configuring Telnet867
Chapter 51 Log and Report881
- Overview881
Chapter 52 File Manager897
- Overview897
  - What You Can Do in this Chapter897
  - What You Need to Know897
Chapter 53 Diagnostics909
- Overview909
  - What You Can Do in this Chapter909
  - The Diagnostic Screen909
- The System Log Screen917
- Reboot919
Chapter 54 Reboot919
- Overview919
  - What You Need to Know919
- The Reboot Screen919
- Shutdown921
Chapter 55 Shutdown921
- Overview921
  - What You Need to Know921
- The Shutdown Screen921
- Troubleshooting923
Chapter 56 Troubleshooting923
- Troubleshooting925
Chapter 57 Product Specifications943
Static Routes948
Syslog949
Tcp951
- Or WLAN PCMCIA Card Installation952
- Power Adaptor Specifications952
Appendix A Log Descriptions955
Appendix B Common Services1017
- Protocol1017
Appendix C Displaying Anti-Virus Alert Messages in Windows1021
- Windows 20001022
Appendix D Importing Certificates1027
- Internet Explorer1027
Appendix E Wireless Lans1053
- Wireless Lan Topologies1053
- Fragmentation Threshold1057
- Preamble Type1057
- Wireless Security Overview1058
- Types of Eap Authentication1060
- Dynamic Wep Key Exchange1061
- Wpa and Wpa21062
- Security Parameters Summary1066
- Antenna Characteristics1067
- Types of Antennas for Wlan1067
- Positioning Antennas1068
Appendix F Open Software Announcements1069
Appendix G Legal Information1127
- Zyxel Limited Warranty1129
Index1131
- And OSPF1139
- And RIP1139
- And ALG1139
  - Statistics1141
  - Trial Service Activation1141
- Password1141
  - Updating Signatures1141
  - Static DHCP1142
- Metric1142

ZyXEL Communications USG-100@USG-200 - V2.20 ED 2 - Page 496

Table of Contents

Related product manuals