ZyXEL Communications USG-100@USG-200 - V2.20 ED 2

To Next Page

To Previous Page

Document Conventions

ZyWALL USG 100/200 Series User’s Guide

Icons Used in Figures

Figures in this User’s Guide may use the following generic icons. The ZyWALL icon

is not an exact representation of your device.

ZyWALL Computer Notebook computer

Server Firewall Telephone

Switch Router

Main Page

About this User's Guide3
Document Conventions6
- Syntax Conventions6
Safety Warnings8
Contents Overview9
- Table of Contents9
Table of Contents11
User's Guide31
PART I User's Guide31
Chapter 1 Introducing the Zywall33
- Overview and Key Default Settings33
- Rack-Mounted Installation34
  - Rack-Mounted Installation Procedure34
- Front Panel35
  - Front Panel Leds36
- Management Overview36
- Starting and Stopping the Zywall38
Chapter 2 Features and Applications39
- Features39
- Applications41
- Web Configurator47
Chapter 3 Web Configurator47
- Web Configurator Requirements47
- Web Configurator Access47
- Web Configurator Screens Overview49
- Ssl Vpn54
Chapter 4 Installation Setup Wizard65
- Installation Setup Wizard Screens65
- Device Registration72
- Quick Setup75
Chapter 5 Quick Setup75
- Quick Setup Overview75
- WAN Interface Quick Setup76
- VPN Quick Setup81
- VPN Setup Wizard: Wizard Type82
- VPN Express Wizard - Scenario83
Chapter 6 Configuration Basics93
- Object-Based Configuration93
- Zones, Interfaces, and Physical Ports94
  - Interface Types95
  - Default Interface and Zone Configuration96
- Terminology in the Zywall97
- Packet Flow99
- Feature Configuration Overview102
- Objects113
  - User/Group113
- System114
Chapter 7 Tutorials117
- How to Configure Interfaces, Port Roles, and Zones117
  - Configure a WAN Ethernet Interface118
- Configure the OPT Interface for a Local Network119
- Configure Zones120
- Configure Port Roles121
- How to Configure a Cellular Interface122
- How to Configure Load Balancing124
  - Set up Available Bandwidth on Ethernet Interfaces124
  - Configure the WAN Trunk125
- How to Set up a Wireless LAN127
- How to Set up an Ipsec VPN Tunnel143
- How to Configure a Hub-And-Spoke Ipsec VPN Without a VPN Concentrator146
- How to Configure User-Aware Access Control148
- How to Use a RADIUS Server to Authenticate User Accounts Based on Groups157
- How to Use Endpoint Security and Authentication Policies159
  - Configure the Endpoint Security Objects159
  - Configure the Authentication Policy161
- How to Configure Service Control162
  - Allow HTTPS Administrator Access Only from the LAN163
- How to Allow Incoming H.323 Peer-To-Peer Calls165
- How to Allow Public Access to a Web Server169
- How to Use an IPPBX on the DMZ172
Chapter 8 L2TP VPN Example187
- Configuring the Default L2TP VPN Gateway Example187
- Configuring the Default L2TP VPN Connection Example189
- Configuring the L2TP VPN Settings Example190
- Configuring L2TP VPN in Windows Vista, XP, or 2000191
Technical Reference225
Part II: Technical Reference225
- Dashboard227
Chapter 9 Dashboard227
- Overview227
  - What You Can Do in this Chapter227
- The Dashboard Screen227
Chapter 10 Monitor241
- Overview241
  - What You Can Do in this Chapter241
- The Port Statistics Screen242
  - The Port Statistics Graph Screen244
- Interface Status Screen245
- The Traffic Statistics Screen248
- The Session Monitor Screen251
- The DDNS Status Screen254
- IP/MAC Binding Monitor254
- The Login Users Screen256
- WLAN Interface Station Monitor Screen256
- Cellular Status Screen258
- USB Storage Screen260
- Application Patrol Statistics261
  - Application Patrol Statistics: General Setup261
  - Application Patrol Statistics: Bandwidth Statistics262
  - Application Patrol Statistics: Protocol Statistics263
  - Application Patrol Statistics: Individual Protocol Statistics by Rule264
- The Ipsec Monitor Screen265
  - Regular Expressions in Searching Ipsec Sas267
- The SSL Connection Monitor Screen268
- L2TP over Ipsec Session Monitor Screen269
- The Anti-Virus Statistics Screen270
- The IDP Statistics Screen272
- The Content Filter Statistics Screen274
- Content Filter Cache Screen275
- The Anti-Spam Statistics Screen278
- The Anti-Spam Status Screen280
- Log Screen281
- Registration285
Chapter 11 Registration285
- Overview285
  - What You Can Do in this Chapter285
  - What You Need to Know285
- The Registration Screen287
- The Service Screen289
Chapter 12 Signature Update291
- Overview291
  - What You Can Do in this Chapter291
  - What You Need to Know291
- The Antivirus Update Screen292
- The Idp/Apppatrol Update Screen293
- The System Protect Update Screen295
Chapter 13 Interfaces297
- Interface Overview297
- Add336
Chapter 14 Trunks373
- Overview373
Chapter 15 Policy and Static Routes383
- Policy and Static Routes Overview383
  - What You Can Do in this Chapter383
  - What You Need to Know384
- Policy Route Screen386
  - Policy Route Edit Screen389
- IP Static Route Screen393
  - Static Route Add/Edit Screen394
- Policy Routing Technical Reference395
  - Port Triggering396
  - Maximize Bandwidth Usage397
Chapter 16 Routing Protocols399
- Routing Protocols Overview399
  - What You Can Do in this Chapter399
  - What You Need to Know399
- The RIP Screen400
- The OSPF Screen401
- Routing Protocol Technical Reference410
Chapter 17 Zones413
- Zones Overview413
  - What You Can Do in this Chapter413
  - What You Need to Know414
- The Zone Screen415
- Zone Edit416
- Ddns417
Chapter 18 DDNS417
- DDNS Overview417
  - What You Can Do in this Chapter417
  - What You Need to Know417
- The DDNS Screen418
  - The Dynamic DNS Add/Edit Screen420
- Nat423
Chapter 19 NAT423
- NAT Overview423
  - What You Can Do in this Chapter423
  - What You Need to Know424
- The NAT Screen424
  - The NAT Add/Edit Screen426
- NAT Technical Reference429
  - HTTP Redirect433
Chapter 20 HTTP Redirect433
- Overview433
  - What You Can Do in this Chapter433
  - What You Need to Know434
- The HTTP Redirect Screen435
  - The HTTP Redirect Edit Screen436
- Alg439
Chapter 21 ALG439
- ALG Overview439
- The ALG Screen443
- ALG Technical Reference445
  - IP/MAC Binding447
Chapter 22 IP/MAC Binding447
- IP/MAC Binding Overview447
  - What You Can Do in this Chapter447
  - What You Need to Know448
- IP/MAC Binding Summary448
  - IP/MAC Binding Edit449
  - Static DHCP Edit450
- IP/MAC Binding Exempt List451
Chapter 23 Authentication Policy453
- Overview453
  - What You Can Do in this Chapter453
  - What You Need to Know454
- Authentication Policy Screen454
- Edit455
Chapter 24 Firewall461
- Overview461
- The Firewall Screen469
  - Configuring the Firewall Screen470
  - The Firewall Add/Edit Screen473
- The Session Limit Screen474
  - The Session Limit Add/Edit Screen476
Chapter 25 Ipsec VPN479
- Ipsec VPN Overview479
- The VPN Connection Screen482
  - The VPN Connection Add/Edit (IKE) Screen484
  - The VPN Connection Add/Edit Manual Key Screen491
- The VPN Gateway Screen494
  - The VPN Gateway Add/Edit Screen495
- VPN Concentrator503
- Ipsec VPN Background Information507
  - Ike Sa Overview508
  - Ipsec Sa Overview514
- Ssl Vpn521
Chapter 26 SSL VPN521
- Overview521
- The SSL Access Privilege Screen524
  - The SSL Access Policy Add/Edit Screen526
  - Access Policy528
- The SSL Global Setting Screen529
  - How to Upload a Custom Logo531
- Establishing an SSL VPN Connection532
- SSL User Screens535
Chapter 27 SSL User Screens535
- Overview535
  - What You Need to Know535
- Remote User Login536
- The SSL VPN User Screens541
- Bookmarking the Zywall542
- Logging out of the SSL VPN User Screens542
Chapter 28 SSL User Application Screens545
- SSL User Application Screens Overview545
- The Application Screen545
- SSL User File Sharing547
Chapter 29 SSL User File Sharing547
- Overview547
  - What You Need to Know547
- The Main File Sharing Screen548
- Opening a File or Folder548
  - Downloading a File550
  - Saving a File551
- Creating a New Folder551
- Renaming a File or Folder552
- Deleting a File or Folder552
- Uploading a File553
Chapter 30 Zywall Secuextender555
- The Zywall Secuextender Icon555
- Statistics556
- View Log557
- Suspend and Resume the Connection557
- Stop the Connection558
- Uninstalling the Zywall Secuextender558
Chapter 31 L2TP VPN559
- Overview559
  - What You Can Do in this Chapter559
  - What You Need to Know559
- L2TP VPN Screen561
Chapter 32 Application Patrol563
- Overview563
Chapter 33 Anti-Virus589
- Overview589
Chapter 34 IDP605
- Overview605
Chapter 35 ADP641
- Overview641
Chapter 36 Content Filtering663
- Overview663
Chapter 37 Content Filter Reports687
- Overview687
- Viewing Content Filter Reports687
Chapter 38 Anti-Spam695
- Overview695
  - What You Can Do in this Chapter695
  - What You Need to Know695
- Before You Begin697
- The Anti-Spam General Screen697
  - Anti-Spam698
  - The Anti-Spam Policy Add or Edit Screen699
- The Anti-Spam Black List Screen701
  - The Anti-Spam Black or White List Add/Edit Screen703
  - Regular Expressions in Black or White List Entries704
- The Anti-Spam White List Screen705
- The DNSBL Screen706
- Anti-Spam Technical Reference708
Chapter 39 Device HA713
- Overview713
- Device HA General715
- The Active-Passive Mode Screen716
  - Configuring Active-Passive Mode Device HA718
  - Synchronization720
- Port Number720
Chapter 40 User/Group735
- Overview735
  - What You Can Do in this Chapter735
  - What You Need to Know735
- User Summary Screen738
  - User Add/Edit Screen738
- User Group Summary Screen741
  - Group Add/Edit Screen742
- Setting Screen743
  - Default User Authentication Timeout Settings Edit Screens746
  - User Aware Login Example748
- User /Group Technical Reference749
  - Addresses751
Chapter 41 Addresses751
- Overview751
  - What You Can Do in this Chapter751
  - What You Need to Know751
- Address Summary Screen751
  - Address Add/Edit Screen753
- Address Group Summary Screen754
  - Address Group Add/Edit Screen755
- Services757
Chapter 42 Services757
- Overview757
  - What You Can Do in this Chapter757
  - What You Need to Know757
- The Service Summary Screen758
  - The Service Add/Edit Screen760
- The Service Group Summary Screen760
  - The Service Group Add/Edit Screen762
- Schedules763
Chapter 43 Schedules763
- Overview763
  - What You Can Do in this Chapter763
  - What You Need to Know763
- The Schedule Summary Screen764
Chapter 44 AAA Server769
- Overview769
- Active Directory or LDAP Server Summary773
  - Adding an Active Directory or LDAP Server773
- RADIUS Server Summary775
  - Adding a RADIUS Server777
Chapter 45 Authentication Method779
- Overview779
- Authentication Method Objects780
  - Creating an Authentication Method Object781
- Certificates785
Chapter 46 Certificates785
- Overview785
- The My Certificates Screen789
- The Trusted Certificates Screen799
  - The Trusted Certificates Edit Screen800
  - The Trusted Certificates Import Screen804
- Certificates Technical Reference805
Chapter 47 ISP Accounts807
- Overview807
  - What You Can Do in this Chapter807
- ISP Account Summary807
  - ISP Account Edit808
  - Stac Compression810
Chapter 48 SSL Application811
- Overview811
- The SSL Application Screen813
  - Creating/Editing a Web-Based SSL Application Object814
  - Creating/Editing a File Sharing SSL Application Object816
Chapter 49819
- Endpoint Security819
Chapter 50 System829
- Overview829
  - What You Can Do in this Chapter829
- Host Name830
System Name830
- USB Storage831
- Date and Time832
  - Pre-Defined NTP Time Servers List834
  - Time Server Synchronization835
- Console Port Speed836
- DNS Overview836
- WWW Overview844
- Ssh861
- Telnet866
  - Configuring Telnet867
Chapter 51 Log and Report881
- Overview881
Chapter 52 File Manager897
- Overview897
  - What You Can Do in this Chapter897
  - What You Need to Know897
Chapter 53 Diagnostics909
- Overview909
  - What You Can Do in this Chapter909
  - The Diagnostic Screen909
- The System Log Screen917
- Reboot919
Chapter 54 Reboot919
- Overview919
  - What You Need to Know919
- The Reboot Screen919
- Shutdown921
Chapter 55 Shutdown921
- Overview921
  - What You Need to Know921
- The Shutdown Screen921
- Troubleshooting923
Chapter 56 Troubleshooting923
- Troubleshooting925
Chapter 57 Product Specifications943
Static Routes948
Syslog949
Tcp951
- Or WLAN PCMCIA Card Installation952
- Power Adaptor Specifications952
Appendix A Log Descriptions955
Appendix B Common Services1017
- Protocol1017
Appendix C Displaying Anti-Virus Alert Messages in Windows1021
- Windows 20001022
Appendix D Importing Certificates1027
- Internet Explorer1027
Appendix E Wireless Lans1053
- Wireless Lan Topologies1053
- Fragmentation Threshold1057
- Preamble Type1057
- Wireless Security Overview1058
- Types of Eap Authentication1060
- Dynamic Wep Key Exchange1061
- Wpa and Wpa21062
- Security Parameters Summary1066
- Antenna Characteristics1067
- Types of Antennas for Wlan1067
- Positioning Antennas1068
Appendix F Open Software Announcements1069
Appendix G Legal Information1127
- Zyxel Limited Warranty1129
Index1131
- And OSPF1139
- And RIP1139
- And ALG1139
  - Statistics1141
  - Trial Service Activation1141
- Password1141
  - Updating Signatures1141
  - Static DHCP1142
- Metric1142

ZyXEL Communications USG-100@USG-200 - V2.20 ED 2 - Page 7

Table of Contents

Related product manuals