ZyXEL Communications VPN Series Handbook & Instructions

255 pages

To Next Page

To Next Page

Page #1 background image

Loading...

Page #1 background image

1/255

www.zyxel.com

ZyWALL/USG Series

ZyWALL 110 / 310 / 1100

USG40 / USG40W / USG60 / USG60W / USG110 /

USG210 / USG310 / USG1100 / USG1900

Security Firewalls

Firmware Version 4.13 ~ 4.15

Edition 1, 7/2016

Handbook

Default Login Details

LAN Port IP Address

https://192.168.1.1

User Name

admin

Password

1234

Copyright © 2016 ZyXEL Communications Corporation

Table of Contents

Default Chapter2
- Table of Contents2
How to Configure Site-To-Site Ipsec VPN with Amazon VPC8
- Set up the Ipsec VPN Tunnel on the Amazon VPC9
- Set up the Ipsec VPN Tunnel on the Zywall/Usg13
- Test the Ipsec VPN Tunnel17
- What Could Go Wrong18
How to Configure GRE over Ipsec VPN Tunnel20
- Set up the Zywall/Usg GRE over Ipsec VPN Tunnel of Corporate Network (HQ)21
- Set up the Zywall/Usg GRE over Ipsec VPN Tunnel of Corporate Network (Branch)25
- Test the GRE over Ipsec VPN Tunnel30
- What Could Go Wrong30
How to Configure Ipsec Site to Site VPN While One Site Is Behind a NAT Router32
- Set up the Zywall/Usg Ipsec VPN Tunnel of Corporate Network (HQ)33
- Set up the Zywall/Usg Ipsec VPN Tunnel of Corporate Network (Branch)36
- Set up the NAT Router (Using Zywall USG Device in this Example)40
- Test the Ipsec VPN Tunnel42
- What Could Go Wrong43
How to Configure L2TP over Ipsec VPN While the Zywall/Usg Is Behind a NAT Router45
- Set up the L2TP VPN Tunnel on the Zywall/Usg_Hq46
- Set up the NAT Router (Using Zywall USG Device in this Example)50
- Test the L2TP over Ipsec VPN Tunnel52
- What Could Go Wrong55
How to Configure if I Want User Can Only See SSL VPN Login Button in Web Portal Login Page57
- Set up the DNS Service58
- Set up the Zywall/Usg SSL VPN Setting58
- Set up the Zywall/Usg System Setting59
- Test the SSL VPN60
How to Configure an SSL VPN Tunnel (with Secuextender Version 4.0.0.1) on the Windows 10 Operating System64
- Set up the SSL VPN Tunnel with Windows 1064
- What Can Go Wrong68
How to Redirect Multiple LAN Interface Traffic to the VPN Tunnel70
- Set up the Zywall/Usg Ipsec VPN Tunnel of Corporate Network (HQ)71
- Set up the Zywall/Usg Ipsec VPN Tunnel of Corporate Network (Branch)74
- Set up the Policy Route (Zywall/Usg_Hq)77
- Set up the Policy Route (Zywall/Usg_Branch)79
- Test the Ipsec VPN Tunnel80
- What Could Go Wrong82
How to Configure Ipsec VPN Failover84
- Set up the Zywall/Usg Ipsec VPN Tunnel of Corporate Network (HQ)85
- Set up the Zywall/Usg Ipsec VPN Tunnel of Corporate Network (Branch)88
- Set up the WAN Trunk (Zywall/Usg_Hq)92
- Set up the Failover Command Line (Zywall/Usg HQ)93
- Test the Ipsec VPN Tunnel95
- What Could Go Wrong96
How to Create VTI and Configure VPN Failover with VTI98
- VTI Deployment Flow98
- Set up the Zywall/Usg VTI of Corporate Network (HQ)99
- Set up the Zywall/Usg VTI of Corporate Network (Branch)104
- Test the Ipsec VPN Tunnel111
- What Can Go Wrong113
How to Import Zywall/Usg Certificate for L2TP over Ipsec in Android Mobile Phone115
- Set up the L2TP VPN Tunnel on the Zywall/Usg116
- Export a Certificate from Zywall/Usg and Import It to Android120
- Mobile Phone120
- Set up the L2TP VPN Tunnel on the Android Mobile Device121
- Test the L2TP over Ipsec VPN Tunnel124
- What Could Go Wrong126
How to Import Zywall/Usg Certificate for L2TP over Ipsec in IOS Mobile Phone128
- Set up the L2TP VPN Tunnel on the Zywall/Usg129
- Export a Certificate from Zywall/Usg and Import It to Ios Mobile Phone133
- Set up the L2TP VPN Tunnel on the Ios Mobile Device134
- Test the L2TP over Ipsec VPN Tunnel137
- What Could Go Wrong138
How to Configure the USG When Using a Cloud Based SIP System140
- Set up the SIP ALG141
- Test Result142
- What Could Go Wrong142
How to Block HTTPS Websites by Domain Filter Without Applying SSL Inspection143
- Set up the Content Filter on the Zywall/Usg144
- Set up the Security Policy on the Zywall/Usg146
- Set up the System Policy on the Zywall/Usg146
- Test the Result147
How to Configure Content Filter 2.0 - Geo IP Blocking149
- Set up the Address Objet with Geo IP on the Zywall/Usg150
- Set up the Security Policy on the Zywall/Usg151
- Test the Result152
- What Could Go Wrong153
How to Block the Client Accessing to Certain Country Using Geo IP and Content Filter154
- Check Geo IP License Status on the Zywall/Usg155
- Set up the Address Objet with Geo IP on the Zywall/Usg155
- Set up the Security Policy on the Zywall/Usg156
- Test the Result158
How to Set up Link Aggregation Group (LAG)160
- Set up the Active-Backup, 802.3Ad, Balance-Alb160
- Set up the Active-Backup Mode164
- Test the Result166
- What Can Go Wrong166
How to Restrict Web Portal Access from the Internet167
- Set up the Zywall/Usg System Setting168
- Test the Web Access169
How to Setup and Configure Daily Report171
- Set up the Zywall/Usg Email Daily Report Setting172
- Test the Daily Log Report173
- What Could Go Wrong174
How to Setup and Configure Email Logs175
- Set up the Zywall/Usg Email Logs Setting176
- Test the Email Log178
- What Could Go Wrong178
How to Setup and Send Logs to a Syslog Server179
- Set up the Syslog Server (Use Papertrail Syslog in this Example)180
- Set up the Zywall/Usg Remote Server Setting182
- Test the Remote Server183
- What Could Go Wrong184
How to Setup and Send Logs to a Vantage Reports Server185
- Set up the VRPT Server186
- Set up the Zywall/Usg Remote Server Setting189
- Test the Remote Server189
- What Could Go Wrong190
How to Enable and Send Logs to the USB Storage191
- Set up the USB System Settings192
- Set up the USB Log Storage192
- Check the USG Log Files193
How to Create a Wi-Fi VLAN Interfaces to Separate Staff Network and Guest Network194
- Set up Wi-Fi VLAN Interfaces195
- Test Result202
- What Could Go Wrong203
How to Activate a Free Access Hotspot205
- Set up the Free Access Hotspot206
- Test the User Agreement and Advertisement Webpage208
- What Could Go Wrong209
- Set up Enable the Free Time Feature210
- Test Free Time Feature215
- What Can Go Wrong218
How to Enable Device HA Pro220
- Device HA Pro License221
- Behavior of the Device HA Pro222
- Suggestions224
- How Do I Configure Device HA Pro in My Current Environment224
- What Can Go Wrong229
How to Set up Ipv6 Interfaces for Pure Ipv6 Routing231
- Setting up the Ipv6 Interface232
- Set up the Prefix Delegation and Router Advertisement234
- Test238
- What Can Go Wrong238
- Test240
How to Perform and Use the Packet Capture Feature on the Zywall/Usg241
- Set up the Packet Capture Feature242
- Check the Capture Files244
How to Automatically Reboot the Zywall/Usg by Schedule246
- Set up the Shell Script247
- Set up the Schedule Run248
- Check the Reboot Status249
How to Continuously Run a Zysh Script251
- Set up the Shell Script252

Other manuals for ZyXEL Communications VPN Series

User Guide1090 pages

Quick Start Guide8 pages

Initial Setup9 pages

Handbook810 pages

Questions and Answers:

Need help?

Do you have a question about the ZyXEL Communications VPN Series and is the answer not in the manual?

ZyXEL Communications VPN Series Specifications

General

Model	VPN Series
Firewall Throughput	Varies by model
VPN Throughput	Varies by model
Interfaces	Varies by model
VPN Tunnels	Varies by model
Management	Web-based, CLI
Concurrent sessions	Varies by model
New sessions per second	Varies by model
IPSec VPN tunnels	Varies by model
SSL VPN users	Varies by model

Related product manuals

Preview: ZyWall USG20-VPN

ZyWall USG20-VPN

Preview: ZyXEL Communications 1050

ZyXEL Communications 1050

Preview: ZyXEL Communications USG40

ZyXEL Communications USG40

Preview: ZyXEL Communications USG310

ZyXEL Communications USG310

ZyXEL Communications USG210

ZyXEL Communications USG40W

ZyXEL Communications ATP800

Preview: ZyXEL Communications ZYWALL 35

ZyXEL Communications ZYWALL 35

ZyXEL Communications ZyWALL 310

Preview: ZyXEL Communications ZyWALL 1100

ZyXEL Communications ZyWALL 1100

Preview: ZyWALL 2 Plus

Preview: ZyWALL USG-Series

ZyWALL USG-Series