Home
ZyXEL Communications
Firewall
USG310
ZyXEL Communications USG310 Handbook
749 pages
Manual
Specs
Ask a question
To Next Page
To Next Page
Loading...
1/
749
www.zyxel.com
ZyWALL/USG
Series
Z
y
W
ALL
110
/
310
/
1100
USG
20
-VPN / USG20
W-VPN
/
USG40
/ USG40
W
/
USG60
/
USG60W
/ USG110
/
USG210
/
USG310
/
USG1100
/
USG1900 /
USG2200-VPN /
Security Firew
all
s
Fir
mw
are V
ersion 4.25
Edition 2, 4/2017
Handb
ook
Default
Login
Details
LAN P
ort I
P
Ad
dres
s
h
tt
p
s:
//19
2.16
8.1.1
User Name
ad
mi
n
P
assw
ord
123
4
2
Table of Contents
Default Chapter
2
Table of Contents
2
How to Configure Site-To-Site Ipsec VPN with Amazon VPC
17
Set up the Ipsec VPN Tunnel on the Amazon VPC
18
Set up the Ipsec VPN Tunnel on the Zywall/Usg
22
Test the Ipsec VPN Tunnel
26
What Could Go Wrong
27
How to Configure Site-To-Site Ipsec VPN with Microsoft (MS) Azure
29
Set up the Ipsec VPN Tunnel on the Zywall/Usg
30
Set up the Ipsec VPN Tunnel on the MS Azure
36
Test the Ipsec VPN Tunnel
45
What Could Go Wrong
47
How to Configure GRE over Ipsec VPN Tunnel
50
Set up the Zywall/Usg GRE over Ipsec VPN Tunnel of Corporate Network (HQ)
51
Set up the Zywall/Usg GRE over Ipsec VPN Tunnel of Corporate Network (Branch)
55
Test the GRE over Ipsec VPN Tunnel
60
What Could Go Wrong
60
How to Configure Site-To-Site Ipsec VPN Where the Peer Has a Static IP Address
62
Set up the Zywall/Usg Ipsec VPN Tunnel of Corporate Network (HQ)
62
Set up the Zywall/Usg Ipsec VPN Tunnel of Corporate Network (Branch)
66
Test the Ipsec VPN Tunnel
70
What Could Go Wrong
71
How to Configure Site-To-Site Ipsec VPN Where the Peer Has a Dynamic IP Address
73
Set up the Zywall/Usg Ipsec VPN Tunnel of Corporate Network (HQ)
73
(Branch Has a Dynamic IP Address)
77
Test the Ipsec VPN Tunnel
81
What Could Go Wrong
82
How to Configure Ipsec Site to Site VPN While One Site Is Behind a NAT Router
84
Set up the Zywall/Usg Ipsec VPN Tunnel of Corporate Network (HQ)
84
Set up the Zywall/Usg Ipsec VPN Tunnel of Corporate Network (Branch)
88
Set up the NAT Router (Using Zywall USG Device in this Example)
91
Test the Ipsec VPN Tunnel
93
What Could Go Wrong
94
How to Configure Hub-And-Spoke Ipsec VPN
96
Set up the Ipsec VPN Tunnel on the Zywall/Usg by Using VPN Concentrator Hub_Hq-To-Branch_A
97
Hub_Hq-To-Branch_B
101
Hub_Hq Concentrator
104
Spoke_Branch_A
106
Spoke_Branch_B
111
Test the Ipsec VPN Tunnel
115
What Could Go Wrong
118
Set up the Ipsec VPN Tunnel of Zywall/Usg Without Using VPN Concentrator Hub_Hq-To-Branch_A
119
Hub_Hq-To-Branch_B
122
Spoke_Branch_A
125
Spoke_Branch_B
128
Test the Ipsec VPN Tunnel
131
What Could Go Wrong
133
How to Use Dual-WAN to Perform Fail-Over on VPN Using the VPN Concentrator
135
Set up the Ipsec VPN Tunnel on the Zywall/Usg Hub_Hq-To-Branch_A
136
Hub_Hq-To-Branch_B
139
Hub_Hq Concentrator
142
Spoke_Branch_A
143
Spoke_Branch_B
147
Test the Ipsec VPN Tunnel
151
What Could Go Wrong
153
How to Configure Ipsec VPN with Zywall Ipsec VPN Client
156
Set up the Zywall/Usg Ipsec VPN Tunnel
157
Set up the Zywall Ipsec VPN Client
161
Test the Ipsec VPN Tunnel
165
What Can Go Wrong
166
How to Configure Site-To-Site Ipsec VPN with Fortigate
169
Set up the Ipsec VPN Tunnel on the Zywall/Usg
169
Set up the Ipsec VPN Tunnel on the Fortigate
173
Test the Ipsec VPN Tunnel
178
What Could Go Wrong
179
How to Configure Site-To-Site Ipsec VPN with Watchguard
181
Set up the Ipsec VPN Tunnel on the Zywall/Usg
182
Set up the Ipsec VPN Tunnel on the Watchguard
185
Test the Ipsec VPN Tunnel
192
What Could Go Wrong
194
How to Configure Site-To-Site Ipsec VPN with Cisco
196
Set up the Ipsec VPN Tunnel on the Zywall/Usg
197
Set up the Ipsec VPN Tunnel on the Cisco
203
Test the Ipsec VPN Tunnel
208
What Could Go Wrong
210
How to Configure Site-To-Site Ipsec VPN with a Sonicwall Router
212
Set up the Ipsec VPN Tunnel on the Zywall/Usg
213
Set up the Ipsec VPN Tunnel on the Sonicwall
220
Test the Ipsec VPN Tunnel
224
What Could Go Wrong
226
How to Configure Ipsec VPN Failover
229
Set up the Zywall/Usg Ipsec VPN Tunnel of Corporate Network (HQ)
230
(Branch)
233
Set up the WAN Trunk (Zywall/Usg_Hq)
237
Set up the Failover Command Line (Zywall/Usg HQ)
238
Test the Ipsec VPN Tunnel
240
What Could Go Wrong
241
How to Configure L2TP over Ipsec VPN While the Zywall/Usg Is Behind a NAT Router
243
Set up the L2TP VPN Tunnel on the Zywall/Usg_Hq
244
Set up the NAT Router (Using Zywall USG Device in this Example)
248
Test the L2TP over Ipsec VPN Tunnel
251
What Could Go Wrong
254
How to Configure L2TP VPN with Android 5.0 Mobile Devices
256
Set up the L2TP VPN Tunnel on the Zywall/Usg
257
Set up the L2TP VPN Tunnel on the Android Device
261
Test the L2TP over Ipsec VPN Tunnel
265
What Could Go Wrong
267
How to Configure L2TP VPN with Ios 8.4 Mobile Devices
269
Set up the L2TP VPN Tunnel on the Zywall/Usg
269
Set up the L2TP VPN Tunnel on the Ios Device
275
Test the L2TP over Ipsec VPN Tunnel
276
What Could Go Wrong
279
How to Import Zywall/Usg Certificate for L2TP over Ipsec in Windows 10
281
Set up the L2TP VPN Tunnel on the Zywall/Usg
281
10 Operating System
286
Export a Certificate from Zywall/Usg and Import It to Windows
286
Set up the L2TP VPN Tunnel on the Windows 10
292
Test the L2TP over Ipsec VPN Tunnel
296
What Could Go Wrong
298
How to Import Zywall/Usg Certificate for L2TP over Ipsec in IOS Mobile Phone
300
Set up the L2TP VPN Tunnel on the Zywall/Usg
300
Export a Certificate from Zywall/Usg and Import It to Ios Mobile Phone
304
Set up the L2TP VPN Tunnel on the Ios Mobile Device
305
Test the L2TP over Ipsec VPN Tunnel
308
What Could Go Wrong
309
How to Import Zywall/Usg Certificate for L2TP over Ipsec in Android Mobile Phone
311
Set up the L2TP VPN Tunnel on the Zywall/Usg
311
Export a Certificate from Zywall/Usg and Import It to Android Mobile Phone
316
Set up the L2TP VPN Tunnel on the Android Mobile Device
317
Test the L2TP over Ipsec VPN Tunnel
320
What Could Go Wrong
322
How to Configure the L2TP VPN with Apple MAC os X 10.11 Operating System
324
Set up the L2TP VPN Tunnel on the Zywall/Usg
324
Operating System
330
Test the L2TP over Ipsec VPN Tunnel
332
What Could Go Wrong
334
How to Configure if I Want User Can Only See SSL VPN Login Button in Web Portal Login Page
336
Set up the DNS Service
337
Set up the Zywall/Usg SSL VPN Setting
337
Set up the Zywall/Usg System Setting
338
Test the SSL VPN
339
How to Deploy SSL VPN with Windows 10 Operating System
343
Set up the SSL VPN Tunnel on the Zywall/Usg
344
Set up the SSL VPN Tunnel on the Windows 10 Operating System
348
Test the SSL VPN Tunnel
352
What Could Go Wrong
353
How to Deploy SSL VPN with Apple Mac os X 10.10 Operating System
354
Set up the SSL VPN Tunnel on the Zywall/Usg
355
Set up the SSL VPN Tunnel on the Apple MAC os X 10.10 Operating System
360
Test the SSL VPN Tunnel
364
What Could Go Wrong
367
How to Configure SSL VPN for Remote Access Mobile Devices
369
Set up the SSL VPN Tunnel on the Zywall/Usg
369
Test the SSL VPN Tunnel
372
What Could Go Wrong
375
How to Configure an SSL VPN Tunnel (with Secuextender Version 4.0.0.1) on the Windows 10 Operating System
376
Set up the SSL VPN Tunnel with Windows 10
376
What Can Go Wrong
380
How to Redirect Multiple LAN Interface Traffic to the VPN Tunnel
382
Set up the Zywall/Usg Ipsec VPN Tunnel of Corporate Network (HQ)
383
Set up the Zywall/Usg Ipsec VPN Tunnel of Corporate Network (Branch)
386
Set up the Policy Route (Zywall/Usg_Hq)
389
Set up the Policy Route (Zywall/Usg_Branch)
390
Test the Ipsec VPN Tunnel
391
What Could Go Wrong
393
How to Create VTI and Configure VPN Failover with VTI
395
VTI Deployment Flow
395
Set up the Zywall/Usg VTI of Corporate Network (HQ)
396
Set up the Zywall/Usg VTI of Corporate Network (Branch)
401
Test the Ipsec VPN Tunnel
407
What Can Go Wrong
409
How to Configure the USG When Using a Cloud Based SIP System
411
Set up the SIP ALG
412
Test Result
413
What Could Go Wrong
413
How to Block HTTPS Websites by Domain Filter Without Applying SSL Inspection
414
Set up the Content Filter on the Zywall/Usg
415
Set up the Security Policy on the Zywall/Usg
417
Set up the System Policy on the Zywall/Usg
417
Test the Result
418
How to Configure Content Filter 2.0 with Geo IP Blocking
420
Set up the Address Objet with Geo IP on the Zywall/Usg
421
Set up the Security Policy on the Zywall/Usg
422
Test the Result
423
What Could Go Wrong
424
How to Configure Content Filter 2.0 with Https Domain Filter
425
Application Scenario
425
Set up the Content Filter on the Zywall/Usg
425
Set up the Security Policy on the Zywall/Usg
427
Set up the System Policy on the Zywall/Usg
428
Test the Result
429
What Could Wrong
430
How to Block the Client Accessing to Certain Country Using Geo IP and Content Filter
431
Check Geo IP License Status on the Zywall/Usg
432
Set up the Address Objet with Geo IP on the Zywall/Usg
432
Set up the Security Policy on the Zywall/Usg
433
Test the Result
434
How to Set up Link Aggregation Group (LAG)
437
Set up the Active-Backup, 802.3Ad, Balance-Alb
437
Set up the Active-Backup Mode
441
Test the Result
443
What Can Go Wrong
443
How to Restrict Web Portal Access from the Internet
444
Set up the Zywall/Usg System Setting
445
Test the Web Access
446
How to Setup and Configure Daily Report
448
Set up the Zywall/Usg Email Daily Report Setting
449
Test the Daily Log Report
450
What Could Go Wrong
451
How to Setup and Configure Email Logs
452
Set up the Zywall/Usg Email Logs Setting
452
Test the Email Log
454
What Could Go Wrong
455
How to Setup and Send Logs to a Syslog Server
456
Set up the Syslog Server (Use Papertrail Syslog in this Example)
456
Set up the Zywall/Usg Remote Server Setting
459
Test the Remote Server
460
What Could Go Wrong
461
How to Setup and Send Logs to a Vantage Reports Server
462
Set up the VRPT Server
463
Set up the Zywall/Usg Remote Server Setting
466
Test the Remote Server
466
What Could Go Wrong
467
How to Setup and Send Logs to the USB Storage
468
Set up the USB System Settings
469
Set up the USB Log Storage
469
Check the USG Log Files
470
How to Activate a Free Access Hotspot
471
Set up the Free Access Hotspot
472
Test the User Agreement and Advertisement Webpage
474
What Could Go Wrong
475
Set up Enable the Free Time Feature
476
Test Free Time Feature
481
What Can Go Wrong
484
How to Setup Ipv6 Interfaces for Pure Ipv6 Routing
486
Setting up the Ipv6 Interface
487
Set up the Prefix Delegation and Router Advertisement
489
Test
493
What Can Go Wrong
493
Test
495
How to Perform and Use the Packet Capture Feature on the Zywall/Usg
496
Set up the Packet Capture Feature
497
Check the Capture Files
499
How to Automatically Reboot the Zywall/Usg by Schedule
501
Set up the Shell Script
502
Set up the Schedule Run
503
Check the Reboot Status
504
How to Schedule Youtube Access
506
Set up the Schedule on the Zywall/Usg
506
Create the Application Objects on the Zywall/Usg
507
Set up the Application Patrol Profile on the Zywall/Usg
508
Set up SSL Inspection on the Zywall/Usg
509
Set up the Security Policy on the Zywall/Usg
509
Export Certificate from Zywall/Usg and Import It to Windows 7 Operation System
510
Test the Result
516
What Could Go Wrong
516
How to Continuously Run a Zysh Script
518
Set up the Shell Script
519
Set up the Schedule Run
520
Check the Result
521
How to Register Your Device and Services at Myzyxel.com
523
Account Creation
524
Device Registration
526
Service Registration (in the Case of Standard License)
527
Device Management (in the Case of Registering Bundled Licenses)
528
Refresh Service
529
What Could Go Wrong
529
How to Exempt Specific Users from Security Control
531
Set up the Security Policy on the Zywall/Usg for Employees
532
Set up the Security Policy on the Zywall/Usg for Executives
533
Test the Result
536
What Could Go Wrong
537
How to Detect and Prevent TCP Port Scanning with ADP
538
Set up the ADP Profile on the Zywall/Usg
539
Test the Result
542
What Could Go Wrong
543
How to Block Facebook
544
Set up the Content Filter on the Zywall/Usg
545
Set up the SSL Inspection on the Zywall/Usg
545
Set up the Security Policy on the Zywall/Usg
546
Export Certificate from Zywall/Usg and Import It to Windows 7 Operation System
548
Test the Result
553
What Could Go Wrong
554
How to Exempt Specific Users from a Blocked Website
555
Set up the Security Policy on the Zywall/Usg for Employees
556
Set up the Security Policy on the Zywall/Usg for Executives
557
Test the Result
560
What Could Go Wrong
560
How to Control Access to Google Drive
561
Set up the Application Patrol on the Zywall/Usg
562
Set up the SSL Inspection on the Zywall/Usg
564
Set up the Security Policy on the Zywall/Usg
565
Export Certificate from Zywall/Usg and Import It to Windows 7 Operation System
566
Test the Result
570
What Could Go Wrong
571
How to Block HTTPS Websites Using Content Filtering and SSL Inspection
572
Set up the Content Filter on the Zywall/Usg
573
Set up SSL Inspection on the Zywall/Usg
574
Set up the Security Policy on the Zywall/Usg
575
Export Certificate from Zywall/Usg and Import It to Windows 7 Operation System
576
Test the Result
581
What Could Go Wrong
582
How to Block the Spotify Music Streaming Service
583
Set up IDP Profile on the Zywall/Usg
584
Test the Result
585
What Could Go Wrong
586
How to Test the EICAR Anti-Virus Test File
587
Set up the Anti-Virus Profile on the Zywall/Usg
588
Set up the Security Policy on the Zywall/Usg
589
Test the Result
590
What Could Go Wrong
591
How to Block Downloading of DOC, PDF, XLS and ZIP Files
592
Set up the Anti-Virus Profile on the Zywall/Usg
593
Set up the Security Policy on the Zywall/Usg
595
Test the Result
596
What Could Go Wrong
597
How to Configure an Anti-Spam Policy with Mail Scan and DNSBL
599
Set up the Anti-Spam Profile on the Zywall/Usg
600
Set up the Security Policy on the Zywall/Usg
603
Test the Result
604
What Could Go Wrong
605
How to Configure Bandwidth Management for FTP and HTTP Traffic
606
Set up the Bandwidth Management for FTP on the Zywall/Usg
607
Set up the Bandwidth Management for HTTP on the Zywall/Usg
608
Set up the Bandwidth Management Global Setting on the
610
Zywall/Usg
610
Test the Result
610
What Could Go Wrong
611
How to Limit Bittorrent or Other Peer-To-Peer Traffic
612
Set up the Application Patrol Profile on the Zywall/Usg
613
Set up the Bandwidth Management for Bittorrent on the Zywall/Usg
614
Set up the Bandwidth Management Global Setting on the Zywall/Usg
616
Test the Result
616
What Could Go Wrong
617
How to Configure a Trunk for WAN Load Balancing with a Static or Dynamic IP Address
618
Set up the Available Bandwidth on WAN1 Interfaces on the Zywall/Usg
619
Set up the Available Bandwidth on WAN2 Interfaces on the Zywall/Usg
620
Set up the WAN Trunk on the Zywall/Usg
620
Test the Result
621
What Could Go Wrong
622
How to Configure DNS Inbound Load Balancing to Balance DNS Queries Among Interfaces
623
Set up the DNS Inbound Load Balancing on the Zywall/Usg
624
Set up the NAT Rule on the Zywall/Usg
625
Test the Result
626
What Could Go Wrong
627
How to Manage Voice Traffic
628
Set up the SIP ALG on the Zywall/Usg
629
Set up the Bandwidth Management for SIP on the Zywall/Usg
629
Set up the Bandwidth Management for P2P on the Zywall/Usg
630
Set up the Bandwidth Management for FTP on the Zywall/Usg
631
Test the Result
633
What Could Go Wrong
634
How to Manage Zywall/Usg Configuration Files
635
Rename the Configuration Files from the Zywall/Usg
636
Download the Configuration Files on the Zywall/Usg
637
Copy the Configuration Files on the Zywall/Usg
637
Apply the Configuration Files on the Zywall/Usg
638
Upload the Configuration Files from the Zywall/Usg
639
What Could Go Wrong
640
How to Manage Zywall/Usg Firmware
641
Download the Current Firmware Version from Zyxel.com
642
Upload the Firmware on the Zywall/Usg
643
What Could Go Wrong
646
How to Get Started Using the Wizards
647
Set up the Internet Access (Ethernet) Wizard on the Zywall/Usg
647
Set up the Internet Access (Pppoe) Wizard on the Zywall/Usg
651
Set up the Internet Access (PPTP) Wizard on the Zywall/Usg
653
Set up the Wireless Settings Wizard on the Zywall/Usg
656
Set up the Device Registration on the Zywall/Usg
658
How to Configure the 3G/LTE Interface on the Zywall/Usg as a WAN Backup
660
Set up the 3G/LTE Interface on the Zywall/Usg
661
Set up the Trunk on the Zywall/Usg
662
Test the Result
663
What Could Go Wrong
664
How to Configure Two Different WAN Interfaces with Different IP Addresses in the same VLAN
665
Set up the Port Grouping on the Zywall/Usg
666
Set up the VLAN on the Zywall/Usg
666
Set up the Routing on the Zywall/Usg
668
Test the Result
668
What Could Go Wrong
669
How to Let a Server Use the same Public IP Address as the WAN Interface Using the Bridge Interface
670
Set up the Bridge Interface on the Zywall/Usg
671
Test the Result
672
What Could Go Wrong
673
How to Allow Public Access to a Server Behind Zywall/Usg
674
Set up the NAT on the Zywall/Usg
675
Set up the Security Policy on the Zywall/Usg
675
Test the Result
676
What Could Go Wrong
677
How to Set up a Wifi Network with Zyxel Aps
678
Set up the AP Management on the Zywall/Usg
679
Test the Result
681
What Could Go Wrong
681
How to Set up Guest Wifi Network Accounts
683
Set up the Wifi Guest Account, Address Range and Service Rule on the Zywall/Usg
684
Set up the Web Authentication on the Zywall/Usg
686
Set up the Security Policy on the Zywall/Usg
687
Test the Result
688
What Could Go Wrong
690
How to Create a Wi-Fi VLAN Interfaces to Separate Staff Network and Guest Network
692
Set up Wi-Fi VLAN Interfaces
693
Test Result
700
What Could Go Wrong
701
How to Set up Wifi Networks with Microsoft Active Directory Authentication
703
Set up the Wi-Fi Guest Account and Authentication Method on the Zywall/Usg
704
Set up the Active Directory Server Account on the Zywall/Usg
705
Set up the Security Policy on the Zywall/Usg
706
Test the Result
707
What Could Go Wrong
709
How to Set up Ipv6 Interfaces for Pure Ipv6 Routing
710
Enable the Ipv6 on the Zywall/Usg
711
Set up the WAN Ipv6 Interface on the Zywall/Usg
711
Set up the LAN Ipv6 Interface on the Zywall/Usg
712
Test the Result
714
What Could Go Wrong
715
How to Set up an Ipv6 6To4 Tunnel
716
Set up the LAN Ipv6 Interface on the Zywall/Usg
717
Set up the 6To4 Tunnel on the Zywall/Usg
718
Test the Result
719
What Could Go Wrong
720
How to Set up an Ipv6-In-Ipv4 Tunnel
721
Set up the LAN Ipv6 Interface on the Zywall/Usg
722
Set up the 6To4 Tunnel on the Zywall/Usg
723
Set up the Policy Route on the Zywall/Usg
724
Test the Result
725
What Could Go Wrong
726
How to Update Firmware Automatically from a USB Storage
727
Automatic USB Firmware Upgrade Flow
727
Enable the USB Firmware Upgrade Function by CLI Command
728
Save the Firmware on the USB
728
Plug the USB into the Device
729
Firmware Version
729
Check Firmware Status
730
What Can Go Wrong
731
How to Configure DHCP Option 60 - Vendor Class Identifier
734
DHCP Option 60 Deployment Flow
734
Setting up DHCP Option 60 on the Web GUI
734
Setting up DHCP Option 60 on the CLI
736
Test DHCP Option 60
736
What Can Go Wrong
737
How to Configure Device HA Pro
738
Device HA Pro License
739
Behavior of the Device HA Pro
740
Device-HA Pro Setting Screen
740
Suggestions
742
How Do I Configure Device HA Pro in My Current Environment
743
What Can Go Wrong
749
Other manuals for ZyXEL Communications USG310
User Guide
1090 pages
Handbook & Instructions
255 pages
Quick Start Guide
8 pages
Initial Setup
9 pages
Specifications
8 pages
Need help?
Do you have a question about the ZyXEL Communications USG310 and is the answer not in the manual?
Ask a question
ZyXEL Communications USG310 Specifications
General
Brand
ZyXEL Communications
Model
USG310
Category
Firewall
Language
English
Related product manuals
ZyXEL Communications USG60
994 pages
ZyXEL Communications USG40
994 pages
ZyXEL Communications USG210
1090 pages
ZyXEL Communications USG60W
1090 pages
ZyXEL Communications USG40W
1090 pages
ZyWALL USG-Series
150 pages
ZyXEL Communications 310
562 pages
ZyXEL Communications ATP800
852 pages
ZyXEL Communications ZyWall 110
1090 pages
ZyXEL Communications ZyWALL 310
1090 pages
ZyXEL Communications ZyWALL 1100
994 pages
ZyWALL 2 Plus
678 pages
To Next PageTo Next Page
Need help?
General
