ZyXEL Communications ZYWALL 35 - VPN Rules (IKE) Gateway Policy Edit

To Next Page

To Previous Page

Chapter 18 IPSec VPN

ZyWALL 5/35/70 Series User’s Guide

362

• MD5 (Message Digest 5) produces a 128-bit digest to authenticate packet data.

• SHA1 (Secure Hash Algorithm) produces a 160-bit digest to authenticate packet data.

18.5 VPN Rules (IKE) Gateway Policy Edit

In the VPN Rule (IKE) screen, click the add gateway policy ( ) icon or the edit ( ) icon

to display the VPN-Gateway Policy -Edit screen.

Use this screen to configure a VPN gateway policy. The gateway policy identifies the IPSec

routers at either end of a VPN tunnel (My ZyWALL and Remote Gateway) and specifies the

authentication, encryption and other settings needed to negotiate a phase 1 IKE SA.

Main Page

About this User's Guide3
Document Conventions4
Safety Warnings6
Contents Overview9
- Table of Contents9
Table of Contents11
List of Figures31
List of Tables45
Introduction53
PART I Introduction53
Chapter 1 Getting to Know Your Zywall55
- Zywall Internet Security Appliance Overview55
- Zywall Features55
- Ways to Manage the Zywall56
- Good Habits for Managing the Zywall56
- Table 1 Zywall Model Specific Features56
- Applications for the Zywall57
Chapter 2 Introducing the Web Configurator61
- Web Configurator Overview61
- Accessing the Zywall Web Configurator61
- Figure 7 Change Password Screen62
- Figure 8 Replace Certificate Screen62
- Resetting the Zywall63
- Navigating the Zywall Web Configurator64
- Wizard Setup87
Chapter 3 Wizard Setup87
- Wizard Setup Overview87
- Figure 18 Wizard Setup Welcome87
- Internet Access88
  - ISP Parameters88
  - Figure 19 ISP Parameters: Ethernet Encapsulation88
  - Table 12 ISP Parameters: Ethernet Encapsulation88
  - Figure 20 ISP Parameters: Pppoe Encapsulation89
  - Table 13 ISP Parameters: Pppoe Encapsulation90
  - Figure 21 ISP Parameters: PPTP Encapsulation91
  - Table 14 ISP Parameters: PPTP Encapsulation91
  - Internet Access Wizard: Second Screen92
  - Figure 22 Internet Access Wizard: Second Screen92
  - Internet Access Wizard: Registration93
  - Figure 23 Internet Access Setup Complete93
  - Figure 24 Internet Access Wizard: Registration93
  - Internet Access Wizard: Status94
  - Figure 25 Internet Access Wizard: Registration in Progress94
  - Table 15 Internet Access Wizard: Registration94
  - Internet Access Wizard: Service Activation95
  - Figure 26 Internet Access Wizard: Status95
  - Figure 27 Internet Access Wizard: Registration Failed95
  - Figure 28 Internet Access Wizard: Registered Device95
- VPN Wizard Gateway Setting96
- Figure 29 Internet Access Wizard: Activated Services96
- Figure 30 VPN Wizard: Gateway Setting96
- Table 16 VPN Wizard: Gateway Setting96
- VPN Wizard Network Setting97
- Figure 31 VPN Wizard: Network Setting98
- Table 17 VPN Wizard: Network Setting98
- VPN Wizard IKE Tunnel Setting (IKE Phase 1)99
- Figure 32 VPN Wizard: IKE Tunnel Setting99
- VPN Wizard Ipsec Setting (IKE Phase 2)100
- Table 18 VPN Wizard: IKE Tunnel Setting100
- Figure 33 VPN Wizard: Ipsec Setting101
- Table 19 VPN Wizard: Ipsec Setting101
- VPN Wizard Status Summary102
- Figure 34 VPN Wizard: VPN Status102
- Table 20 VPN Wizard: VPN Status103
- VPN Wizard Setup Complete104
- Anti-Spam Wizard: Email Server Location Setting104
- Figure 35 VPN Wizard Setup Complete104
- Anti-Spam Wizard: Direction Recommendations105
- Figure 36 Anti-Spam Wizard: Email Server Location Setting105
- Table 21 Anti-Spam Wizard: Email Server Location Setting105
- Anti-Spam Wizard: Direction Configuration106
- Figure 37 Anti-Spam Wizard: Direction Recommendations106
- Figure 38 Anti-Spam Wizard: Direction Configuration107
- Table 22 Anti-Spam Wizard: Direction Configuration107
- Anti-Spam Wizard: Setup Complete108
- Figure 39 Anti-Spam Wizard: Setup Complete108
Chapter 4 Tutorials109
- Dynamic VPN Rule Configuration109
- Security Settings for VPN Traffic119
- Firewall Rule for VPN Example122
- How to Set up a 3G WAN Connection130
- Configuring Load Balancing132
- Figure 63 Tutorial: Home132
- Configuring Content Filtering133
- Registration141
Chapter 5 Registration141
- Myzyxel.com Overview141
  - Subscription Services Available on the Zywall141
- Registration142
- Figure 75 REGISTRATION143
- Table 24 REGISTRATION143
- Service144
- Figure 76 REGISTRATION: Registered Device144
- Figure 77 REGISTRATION > Service145
- Table 25 REGISTRATION > Service145
Network147
Part II: Network147
Chapter 6 LAN Screens149
- LAN, WAN and the Zywall149
- IP Address and Subnet Mask149
  - Figure 78 LAN and WAN149
  - Private IP Addresses150
- Dhcp151
  - IP Pool Setup151
- RIP Setup151
- Multicast151
- Wins152
- Lan152
- Figure 79 NETWORK > LAN153
- Table 26 NETWORK > LAN153
- LAN Static DHCP155
- LAN IP Alias156
- Figure 80 NETWORK > LAN > Static DHCP156
- Table 27 NETWORK > LAN > Static DHCP156
- Figure 81 Physical Network & Partitioned Logical Networks157
- Figure 82 NETWORK > LAN > IP Alias157
- LAN Port Roles158
- Table 28 NETWORK > LAN > IP Alias158
- Figure 83 NETWORK > LAN > Port Roles159
- Figure 84 Port Roles Change Complete159
- Table 29 NETWORK > LAN > Port Roles159
- Bridge Screens161
Chapter 7 Bridge Screens161
- Bridge Loop161
- Figure 85 Bridge Loop: Bridge Connected to Wired LAN161
- Spanning Tree Protocol (STP)162
- Bridge163
- Table 31 STP Port States163
- Figure 86 NETWORK > Bridge164
- Table 32 NETWORK > Bridge164
- Bridge Port Roles165
- Figure 87 NETWORK > Bridge > Port Roles166
- Figure 88 Port Roles Change Complete166
- Table 33 NETWORK > Bridge > Port Roles166
- WAN Screens167
Chapter 8 WAN Screens167
- WAN Overview167
- Multiple WAN167
- Load Balancing Introduction168
- Load Balancing Algorithms168
  - Least Load First168
  - Weighted Round Robin169
  - Figure 89 Least Load First Example169
  - Table 34 Least Load First: Example 1169
  - Table 35 Least Load First: Example 2169
  - Spillover170
  - Figure 90 Weighted Round Robin Algorithm Example170
  - Figure 91 Spillover Algorithm Example170
- WAN Interface to Local Host Mapping Timeout171
- Figure 92 Incorrect WAN IP171
- TCP/IP Priority (Metric)172
- WAN General172
- Figure 93 NETWORK > WAN (General)173
- Table 36 NETWORK > WAN (General)174
- Configuring Load Balancing176
  - Least Load First176
  - Figure 94 Load Balancing: Least Load First176
  - Table 37 Load Balancing: Least Load First176
  - Weighted Round Robin177
  - Figure 95 Load Balancing: Weighted Round Robin177
  - Table 38 Load Balancing: Weighted Round Robin177
  - Spillover178
  - Figure 96 Load Balancing: Spillover178
  - Table 39 Load Balancing: Spillover178
- WAN IP Address Assignment179
- DNS Server Address Assignment179
- Table 40 Private IP Address Ranges179
- WAN MAC Address180
- Wan180
  - WAN Ethernet Encapsulation180
  - Figure 97 NETWORK > WAN > WAN (Ethernet Encapsulation)181
  - Table 41 NETWORK > WAN > WAN (Ethernet Encapsulation)181
  - Pppoe Encapsulation183
  - Figure 98 NETWORK > WAN > WAN (Pppoe Encapsulation)184
  - Table 42 NETWORK > WAN > WAN (Pppoe Encapsulation)184
  - PPTP Encapsulation186
  - Figure 99 NETWORK > WAN > WAN (PPTP Encapsulation)187
  - Table 43 NETWORK > WAN > WAN (PPTP Encapsulation)187
- Wan2)189
- Table 44 2G, 2.5G, 2.75G, 3G and 3.5G Wireless Technologies190
- Figure 100 NETWORK > WAN > 3G (WAN 2)191
- Table 45 NETWORK > WAN > 3G (WAN 2)192
- Traffic Redirect194
- Configuring Traffic Redirect195
- Figure 101 Traffic Redirect WAN Setup195
- Figure 102 Traffic Redirect LAN Setup195
- Configuring Dial Backup196
- Figure 103 NETWORK > WAN > Traffic Redirect196
- Table 46 NETWORK > WAN > Traffic Redirect196
- Figure 104 NETWORK > WAN > Dial Backup197
- Table 47 NETWORK > WAN > Dial Backup197
- Advanced Modem Setup199
  - AT Command Strings199
  - DTR Signal200
  - Response Strings200
- Configuring Advanced Modem Setup200
- Figure 105 NETWORK > WAN > Dial Backup > Edit200
- Table 48 NETWORK > WAN > Dial Backup > Edit201
- DMZ Screens203
Chapter 9 DMZ Screens203
- Dmz203
- Configuring DMZ203
- Figure 106 NETWORK > DMZ204
- Table 49 NETWORK > DMZ204
- DMZ Static DHCP206
- Figure 107 NETWORK > DMZ > Static DHCP206
- DMZ IP Alias207
- Table 50 NETWORK > DMZ > Static DHCP207
- Figure 108 NETWORK > DMZ > IP Alias208
- Table 51 NETWORK > DMZ > IP Alias208
- DMZ Public IP Address Example209
- DMZ Private and Public IP Address Example209
- Figure 109 DMZ Public Address Example209
- DMZ Port Roles210
- Figure 110 DMZ Private and Public Address Example210
- Figure 111 NETWORK > DMZ > Port Roles211
- Table 52 NETWORK > DMZ > Port Roles211
- Wlan213
Chapter 10 WLAN213
- Wireless LAN Introduction213
  - Additional Installation Requirements for Using 802.1X213
- Configuring WLAN213
- Figure 112 NETWORK > WLAN214
- Table 53 NETWORK > WLAN215
- WLAN Static DHCP216
- WLAN IP Alias217
- Figure 113 NETWORK > WLAN > Static DHCP217
- Table 54 NETWORK > WLAN > Static DHCP217
- Figure 114 NETWORK > WLAN > IP Alias218
- Table 55 NETWORK > WLAN > IP Alias218
- WLAN Port Roles219
- Figure 115 WLAN Port Role Example219
- Figure 116 NETWORK > WLAN > Port Roles220
- Table 56 NETWORK > WLAN > Port Roles220
- Wireless Security221
  - Encryption221
  - Figure 117 NETWORK > WLAN > Port Roles: Change Complete221
  - Figure 118 Zywall Wireless Security Levels221
  - Authentication222
  - Restricted Access222
  - Hide Zywall Identity222
- Security Parameters Summary222
- Table 57 Wireless Security Relational Matrix222
- WEP Encryption223
- Overview223
  - Introduction to RADIUS223
  - EAP Authentication Overview224
  - Figure 119 EAP Authentication224
- Dynamic WEP Key Exchange225
- Introduction to WPA225
  - User Authentication225
  - Encryption225
- WPA-PSK Application Example226
- Introduction to RADIUS227
- WPA with RADIUS Application Example227
- Figure 120 WPA-PSK Authentication227
- Wireless Client WPA Supplicants228
- Wireless Card228
  - Figure 121 WPA with RADIUS Application Example228
  - Figure 122 WIRELESS > Wi-Fi > Wireless Card: no Security229
  - Table 58 WIRELESS > Wi-Fi > Wireless Card: no Security229
  - Static WEP230
  - Figure 123 WIRELESS > Wi-Fi > Wireless Card: Static WEP231
  - Table 59 WIRELESS > Wi-Fi > Wireless Card: Static WEP231
  - Wpa-Psk231
  - Figure 124 WIRELESS > Wi-Fi > Wireless Card: WPA-PSK232
  - Table 60 WIRELESS > Wi-Fi > Wireless Card: WPA-PSK232
  - Figure 125 WIRELESS > Wi-Fi > Wireless Card: WPA233
  - Table 61 WIRELESS > Wi-Fi > Wireless Card: WPA233
  - Wpa233
  - Figure 126 WIRELESS > Wi-Fi > Wireless Card: 802.1X + Dynamic WEP234
  - IEEE 802.1X + Dynamic WEP234
  - Table 62 WIRELESS > Wi-Fi > Wireless Card: 802.1X + Dynamic WEP234
  - Figure 127 WIRELESS > Wi-Fi > Wireless Card: 802.1X + Static WEP235
  - IEEE 802.1X + Static WEP235
  - Table 63 WIRELESS > Wi-Fi > Wireless Card: 802.1X + Static WEP235
  - IEEE 802.1X + no WEP236
  - Figure 128 WIRELESS > Wi-Fi > Wireless Card: 802.1X + no WEP237
  - No Access 802.1X + Static WEP237
  - Table 64 WIRELESS > Wi-Fi > Wireless Card: 802.1X + no WEP237
  - Figure 129 WIRELESS > Wi-Fi > Wireless Card: no Access 802.1X + Static WEP238
  - No Access 802.1X + no WEP238
  - Table 65 WIRELESS > Wi-Fi > Wireless Card: no Access 802.1X + Static WEP238
- MAC Filter239
- Figure 130 WIRELESS > Wi-Fi > MAC Filter239
- Table 66 WIRELESS > Wi-Fi > MAC Filter239
Part III: Security241
- Firewall243
Security241
Chapter 11 Firewall243
- Firewall Overview243
- Figure 131 Default Firewall Action243
- Packet Direction Matrix244
- Figure 132 SECURITY > FIREWALL > Default Rule (Router Mode)244
- Figure 133 Default Block Traffic from WAN1 to DMZ Example245
- Packet Direction Examples246
  - To VPN Packet Direction247
  - Figure 134 from LAN to VPN Example247
  - From VPN Packet Direction248
  - Figure 135 Block DMZ to VPN Traffic by Default Example248
  - Figure 136 from VPN to LAN Example249
  - From VPN to VPN Packet Direction250
  - Figure 137 Block VPN to LAN Traffic by Default Example250
  - Figure 138 from VPN to VPN Example251
- Security Considerations252
- Figure 139 Block VPN to VPN Traffic by Default Example252
- Firewall Rules Example253
- Figure 140 Blocking All LAN to WAN IRC Traffic Example253
- Table 67 Blocking All LAN to WAN IRC Traffic Example253
- Asymmetrical Routes254
  - Figure 141 Limited LAN to WAN IRC Traffic Example254
  - Table 68 Limited LAN to WAN IRC Traffic Example254
  - Asymmetrical Routes and IP Alias255
- Firewall Default Rule (Router Mode)255
- Figure 142 Using IP Alias to Solve the Triangle Route Problem255
- Figure 143 SECURITY > FIREWALL > Default Rule (Router Mode)256
- Table 69 SECURITY > FIREWALL > Default Rule (Router Mode)256
- Firewall Default Rule (Bridge Mode)258
- Figure 144 SECURITY > FIREWALL > Default Rule (Bridge Mode)258
- Table 70 SECURITY > FIREWALL > Default Rule (Bridge Mode)258
- Firewall Rule Summary259
  - Figure 145 SECURITY > FIREWALL > Rule Summary260
  - Table 71 SECURITY > FIREWALL > Rule Summary260
  - Firewall Edit Rule261
  - Figure 146 SECURITY > FIREWALL > Rule Summary > Edit262
  - Table 72 SECURITY > FIREWALL > Rule Summary > Edit263
- Anti-Probing264
- Figure 147 SECURITY > FIREWALL > Anti-Probing264
- Firewall Thresholds265
  - Figure 148 Three-Way Handshake265
  - Table 73 SECURITY > FIREWALL > Anti-Probing265
  - Threshold Values266
- Threshold Screen266
- Figure 149 SECURITY > FIREWALL > Threshold266
- Table 74 SECURITY > FIREWALL > Threshold267
- Service268
  - Figure 150 SECURITY > FIREWALL > Service268
  - Table 75 SECURITY > FIREWALL > Service268
  - Figure 151 SECURITY > FIREWALL > Service > Add269
  - Firewall Edit Custom Service269
  - Table 76 SECURITY > FIREWALL > Service > Add269
- My Service Firewall Rule Example270
- Figure 152 My Service Firewall Rule Example: Service270
- Figure 153 My Service Firewall Rule Example: Edit Custom Service270
- Figure 154 My Service Firewall Rule Example: Rule Summary271
- Figure 155 My Service Firewall Rule Example: Rule Edit271
- Figure 156 My Service Firewall Rule Example: Rule Configuration272
- Figure 157 My Service Firewall Rule Example: Rule Summary273
Chapter 12 Intrusion Detection and Prevention (IDP)275
- Introduction to IDP275
Chapter 13 Configuring IDP279
- Overview279
  - Interfaces279
- General Setup280
- Figure 159 Applying IDP to Interfaces280
- Figure 160 SECURITY > IDP > General280
- Table 77 SECURITY > IDP > General Setup281
- IDP Signatures282
- Update290
- Backup and Restore293
- Figure 169 SECURITY > IDP > Backup & Restore293
Chapter 14 Anti-Virus295
- Anti-Virus Overview295
- Introduction to the Zywall Anti-Virus Scanner296
- General Anti-Virus Setup298
- Figure 171 SECURITY > ANTI-VIRUS > General299
- Table 85 SECURITY > ANTI-VIRUS > General299
- Signature Searching300
- Signature Update303
- Backup and Restore306
- Figure 176 SECURITY > ANTI-VIRUS > Backup and Restore306
Chapter 15 Anti-Spam307
- Anti-Spam Overview307
- Anti-Spam General Screen311
- Figure 178 SECURITY > ANTI-SPAM > General311
- Table 87 SECURITY > ANTI-SPAM > General311
- Anti-Spam External DB Screen313
- Figure 179 SECURITY > ANTI-SPAM > External DB314
- Table 88 SECURITY > ANTI-SPAM > External DB314
- Anti-Spam Lists Screen315
- Figure 180 SECURITY > ANTI-SPAM > Lists316
- Table 89 SECURITY > ANTI-SPAM > Lists316
- Anti-Spam Lists Edit Screen317
- Figure 181 SECURITY > ANTI-SPAM > Lists > Edit317
- Table 90 SECURITY > ANTI-SPAM > Lists > Edit318
Chapter 16321
- Content Filtering Screens321
Chapter 17 Content Filtering Reports343
- Checking Content Filtering Activation343
- Viewing Content Filtering Reports343
- Figure 191 Myzyxel.com: Login344
- Figure 192 Myzyxel.com: Welcome344
- Figure 193 Myzyxel.com: Service Management345
- Figure 194 Blue Coat: Login345
- Figure 195 Content Filtering Reports Main Screen346
- Figure 196 Blue Coat: Report Home346
- Figure 197 Global Report Screen Example347
- Web Site Submission348
- Figure 198 Requested Urls Example348
- Figure 199 Web Page Review Process Screen349
Chapter 18 Ipsec VPN351
- Ipsec VPN Overview351
  - Figure 200 VPN: Example351
  - Figure 201 VPN: IKE SA and Ipsec SA352
  - IKE SA Overview352
- VPN Rules (IKE)353
- Figure 202 Gateway and Network Policies353
- Figure 203 Ipsec Fields Summary353
- Figure 204 SECURITY > VPN > VPN Rules (IKE)354
- Table 99 SECURITY > VPN > VPN Rules (IKE)354
- IKE SA Setup355
  - IKE SA Proposal355
  - Figure 205 IKE SA: Main Negotiation Mode, Steps 1 - 2: IKE SA Proposal355
  - Figure 206 IKE SA: Main Negotiation Mode, Steps 3 - 4: DH Key Exchange356
  - Figure 207 IKE SA: Main Negotiation Mode, Steps 5 - 6: Authentication357
  - Table 100 VPN Example: Matching ID Type and Content357
  - Table 101 VPN Example: Mismatching ID Type and Content358
  - Figure 208 VPN/NAT Example359
- Additional Ipsec VPN Topics360
  - SA Life Time360
  - Ipsec High Availability361
  - Encryption and Authentication Algorithms361
  - Figure 209 Ipsec High Availability361
- VPN Rules (IKE) Gateway Policy Edit362
- Figure 210 SECURITY > VPN > VPN Rules (IKE) > Edit Gateway Policy363
- Table 102 SECURITY > VPN > VPN Rules (IKE) > Edit Gateway Policy364
- Ipsec SA Overview368
  - Local and Remote Networks368
  - Virtual Address Mapping369
  - Active Protocol370
  - Encapsulation370
  - Figure 211 Virtual Mapping of Local and Remote Network IP Addresses370
  - Ipsec SA Proposal and Perfect Forward Secrecy371
  - Figure 212 VPN: Transport and Tunnel Mode Encapsulation371
- Network Policy Edit372
- Figure 213 SECURITY > VPN > VPN Rules (IKE) > Edit Network Policy373
- Table 103 SECURITY > VPN > VPN Rules (IKE) > Edit Network Policy374
- Network Policy Edit: Port Forwarding377
- Figure 214 SECURITY > VPN > VPN Rules (IKE) > Edit Network Policy > Port Forwarding378
- Table 104 SECURITY > VPN > VPN Rules (IKE) > Edit Network Policy > Port Forwarding378
- Network Policy Move379
- Figure 215 SECURITY > VPN > VPN Rules (IKE) > Move Network Policy379
- Table 105 SECURITY > VPN > VPN Rules (IKE) > Move Network Policy379
- Ipsec SA Using Manual Keys380
  - Ipsec SA Proposal Using Manual Keys380
  - Authentication and the Security Parameter Index (SPI)380
- VPN Rules (Manual)380
- Figure 216 SECURITY > VPN > VPN Rules (Manual)381
- Table 106 SECURITY > VPN > VPN Rules (Manual)381
- VPN Rules (Manual): Edit382
- Figure 217 SECURITY > VPN > VPN Rules (Manual) > Edit382
- Table 107 SECURITY > VPN > VPN Rules (Manual) > Edit382
- VPN SA Monitor385
- VPN Global Setting385
  - Local and Remote IP Address Conflict Resolution385
  - Figure 218 SECURITY > VPN > SA Monitor385
  - Table 108 SECURITY > VPN > SA Monitor385
  - Figure 219 Overlap in a Dynamic VPN Rule386
  - Figure 220 Overlap in IP Alias and VPN Remote Networks387
  - Figure 221 SECURITY > VPN > Global Setting387
  - Table 109 SECURITY > VPN > Global Setting387
- Telecommuter Vpn/Ipsec Examples388
  - Telecommuters Sharing One VPN Rule Example389
  - Telecommuters Using Unique VPN Rules Example389
  - Figure 222 Telecommuters Sharing One VPN Rule Example389
  - Table 110 Telecommuters Sharing One VPN Rule Example389
  - Figure 223 Telecommuters Using Unique VPN Rules Example390
  - Table 111 Telecommuters Using Unique VPN Rules Example390
- VPN and Remote Management391
- Hub-And-Spoke VPN391
  - Figure 224 VPN for Remote Management Example391
  - Figure 225 VPN Topologies392
  - Hub-And-Spoke VPN Example392
  - Figure 226 Hub-And-Spoke VPN Example393
  - Hub-And-Spoke Example VPN Rule Addresses393
  - Hub-And-Spoke VPN Requirements and Suggestions393
Chapter 19 Certificates395
- Certificates Overview395
  - Advantages of Certificates396
- Self-Signed Certificates396
- Verifying a Certificate396
  - Checking the Fingerprint of a Certificate on Your Computer396
  - Figure 227 Certificates on Your Computer396
- Configuration Summary397
- Figure 228 Certificate Details397
- Figure 229 Certificate Configuration Overview397
- My Certificates398
- Figure 230 SECURITY > CERTIFICATES > My Certificates398
- Table 112 SECURITY > CERTIFICATES > My Certificates398
- My Certificate Details400
- Figure 231 SECURITY > CERTIFICATES > My Certificates > Details400
- Table 113 SECURITY > CERTIFICATES > My Certificates > Details401
- My Certificate Export402
  - Certificate File Export Formats402
  - Figure 232 SECURITY > CERTIFICATES > My Certificates > Export402
- My Certificate Import403
  - Certificate File Formats403
  - Table 114 SECURITY > CERTIFICATES > My Certificates > Export403
  - Figure 233 SECURITY > CERTIFICATES > My Certificates > Import404
  - Table 115 SECURITY > CERTIFICATES > My Certificates > Import404
- My Certificate Create405
- Figure 234 SECURITY > CERTIFICATES > My Certificates > Import: PKCS#12405
- Table 116 SECURITY > CERTIFICATES > My Certificates > Import: PKCS#12405
- Figure 235 SECURITY > CERTIFICATES > My Certificates > Create (Basic)406
- Figure 236 SECURITY > CERTIFICATES > My Certificates > Create (Advanced)407
- Table 117 SECURITY > CERTIFICATES > My Certificates > Create407
- Trusted Cas410
- Figure 237 SECURITY > CERTIFICATES > Trusted Cas411
- Table 118 SECURITY > CERTIFICATES > Trusted Cas411
- Trusted CA Details412
- Figure 238 SECURITY > CERTIFICATES > Trusted Cas > Details413
- Table 119 SECURITY > CERTIFICATES > Trusted Cas > Details413
- Trusted CA Import415
- Trusted Remote Hosts416
- Figure 239 SECURITY > CERTIFICATES > Trusted Cas > Import416
- Table 120 SECURITY > CERTIFICATES > Trusted Cas Import416
- Figure 240 SECURITY > CERTIFICATES > Trusted Remote Hosts417
- Table 121 SECURITY > CERTIFICATES > Trusted Remote Hosts417
- Trusted Remote Hosts Import418
- Figure 241 SECURITY > CERTIFICATES > Trusted Remote Hosts > Import418
- Table 122 SECURITY > CERTIFICATES > Trusted Remote Hosts > Import418
- Trusted Remote Host Certificate Details419
- Figure 242 SECURITY > CERTIFICATES > Trusted Remote Hosts > Details419
- Table 123 SECURITY > CERTIFICATES > Trusted Remote Hosts > Details420
- Directory Servers421
- Figure 243 SECURITY > CERTIFICATES > Directory Servers421
- Directory Server Add or Edit422
- Figure 244 SECURITY > CERTIFICATES > Directory Server > Add422
- Table 124 SECURITY > CERTIFICATES > Directory Servers422
- Table 125 SECURITY > CERTIFICATES > Directory Server > Add423
Chapter 20 Authentication Server425
- Authentication Server Overview425
- Radius427
- Figure 246 SECURITY > AUTH SERVER > RADIUS427
- Table 126 SECURITY > AUTH SERVER > Local User Database427
- Table 127 SECURITY > AUTH SERVER > RADIUS427
Part IV: Advanced429
Advanced429
Chapter 21 Network Address Translation (NAT)431
- NAT Overview431
- Using NAT435
  - SUA (Single User Account) Versus NAT435
  - Table 129 NAT Mapping Types435
- NAT Overview Screen436
- Figure 250 ADVANCED > NAT > NAT Overview436
- Table 130 ADVANCED > NAT > NAT Overview436
- NAT Address Mapping437
- Port Forwarding440
- Port Forwarding Screen443
- Figure 254 Port Translation Example443
- Figure 255 ADVANCED > NAT > Port Forwarding444
- Table 133 ADVANCED > NAT > Port Forwarding444
- Port Triggering445
- Figure 256 Trigger Port Forwarding Process: Example445
- Figure 257 ADVANCED > NAT > Port Triggering446
- Table 134 ADVANCED > NAT > Port Triggering446
Chapter 22 Static Route449
- IP Static Route449
- Figure 258 Example of Static Routing Topology449
- IP Static Route450
Chapter 23 Policy Route453
- Benefits453
- Routing Policy453
- IP Routing Policy Setup454
- Figure 261 ADVANCED > POLICY ROUTE > Policy Route Summary454
- Policy Route Edit455
- Table 137 ADVANCED > POLICY ROUTE > Policy Route Summary455
- Figure 262 ADVANCED > POLICY ROUTE > Edit456
- Table 138 ADVANCED > POLICY ROUTE > Edit456
Chapter 24 Bandwidth Management459
- Bandwidth Management Overview459
- Bandwidth Classes and Filters459
- Proportional Bandwidth Allocation460
- Application-Based Bandwidth Management460
- Subnet-Based Bandwidth Management460
- Application and Subnet-Based Bandwidth Management460
- Figure 263 Subnet-Based Bandwidth Management Example460
- Table 139 Application and Subnet-Based Bandwidth Management Example460
- Scheduler461
  - Priority-Based Scheduler461
  - Fairness-Based Scheduler461
  - Maximize Bandwidth Usage461
  - Reserving Bandwidth for Non-Bandwidth Class Traffic461
  - Maximize Bandwidth Usage Example462
  - Table 140 Maximize Bandwidth Usage Example462
  - Table 141 Priority-Based Allotment of Unused and Unbudgeted Bandwidth Example462
- Bandwidth Borrowing463
  - Bandwidth Borrowing Example463
  - Table 142 Fairness-Based Allotment of Unused and Unbudgeted Bandwidth Example463
- Maximize Bandwidth Usage with Bandwidth Borrowing464
- Table 143 Bandwidth Borrowing Example464
- Over Allotment of Bandwidth465
- Configuring Summary465
- Table 144 over Allotment of Bandwidth Example465
- Figure 264 ADVANCED > BW MGMT > Summary466
- Table 145 ADVANCED > BW MGMT > Summary466
- Configuring Class Setup467
  - Figure 265 ADVANCED > BW MGMT > Class Setup467
  - Bandwidth Manager Class Configuration468
  - Table 146 ADVANCED > BW MGMT > Class Setup468
  - Figure 266 ADVANCED > BW MGMT > Class Setup > Add Sub-Class469
  - Table 147 ADVANCED > BW MGMT > Class Setup > Add Sub-Class469
  - Bandwidth Management Statistics471
  - Table 148 Services and Port Numbers471
- Bandwidth Manager Monitor472
- Figure 267 ADVANCED > BW MGMT > Class Setup > Statistics472
- Figure 268 ADVANCED > BW MGMT > Monitor473
Chapter 25 DNS475
- DNS Overview475
- DNS Server Address Assignment475
- DNS Servers475
- Address Record476
  - DNS Wildcard476
- Name Server Record476
  - Private DNS Server476
- System Screen477
- DNS Cache481
- Configure DNS Cache481
- Figure 273 ADVANCED > DNS > Cache481
- Configuring DNS DHCP482
- Figure 274 ADVANCED > DNS > DHCP482
- Dynamic DNS483
  - DYNDNS Wildcard484
  - High Availability484
- Configuring Dynamic DNS484
- Figure 275 ADVANCED > DNS > DDNS484
Chapter 26 Remote Management487
- Remote Management Overview487
  - Figure 276 Secure and Insecure Remote Management from the WAN487
  - Remote Management Limitations488
  - System Timeout488
- WWW (HTTP and HTTPS)488
- Www489
- Figure 277 HTTPS Implementation489
- Figure 278 ADVANCED > REMOTE MGMT > WWW490
- Table 150 ADVANCED > REMOTE MGMT > WWW490
- HTTPS Example491
  - Internet Explorer Warning Messages491
  - Netscape Navigator Warning Messages491
  - Figure 279 Security Alert Dialog Box (Internet Explorer)491
  - Avoiding the Browser Warning Messages492
  - Figure 280 Security Certificate 1 (Netscape)492
  - Figure 281 Security Certificate 2 (Netscape)492
  - Login Screen493
  - Figure 282 Example: Lock Denoting a Secure Connection493
  - Figure 283 Replace Certificate494
  - Figure 284 Device-Specific Certificate494
  - Enrolling and Importing SSL Client Certificates495
  - Figure 285 Common Zywall Certificate495
  - Figure 286 Zywall Trusted CA Screen496
  - Figure 287 CA Certificate Example497
  - Figure 288 Personal Certificate Import Wizard 1497
  - Figure 289 Personal Certificate Import Wizard 2498
  - Figure 290 Personal Certificate Import Wizard 3498
  - Figure 291 Personal Certificate Import Wizard 4499
  - Figure 292 Personal Certificate Import Wizard 5499
  - Figure 293 Personal Certificate Import Wizard 6499
  - Using a Certificate When Accessing the Zywall Example500
  - Figure 294 Access the Zywall Via HTTPS500
  - Figure 295 SSL Client Authentication500
  - Figure 296 Secure Web Configurator Login Screen500
- Ssh501
- How SSH Works501
- Figure 297 SSH Communication over the WAN Example501
- Figure 298 How SSH Works501
- SSH Implementation on the Zywall502
  - Requirements for Using SSH502
- Configuring SSH502
- Secure Telnet Using SSH Examples503
  - Example 1: Microsoft Windows503
  - Figure 299 ADVANCED > REMOTE MGMT > SSH503
  - Table 151 ADVANCED > REMOTE MGMT > SSH503
  - Example 2: Linux504
  - Figure 300 SSH Example 1: Store Host Key504
  - Figure 301 SSH Example 2: Test504
- Secure FTP Using SSH Example505
- Figure 302 SSH Example 2: Log in505
- Figure 303 Secure FTP: Firmware Upload Example505
- Telnet506
- Configuring TELNET506
- Figure 304 ADVANCED > REMOTE MGMT > Telnet506
- Table 152 ADVANCED > REMOTE MGMT > Telnet506
- Ftp507
- Figure 305 ADVANCED > REMOTE MGMT > FTP507
- Table 153 ADVANCED > REMOTE MGMT > FTP507
- Snmp508
  - Figure 306 SNMP Management Model508
  - Remote Management: Snmp509
  - SNMP Traps509
  - Supported Mibs509
  - Table 154 SNMP Traps509
  - Figure 307 ADVANCED > REMOTE MGMT > SNMP510
  - Table 155 ADVANCED > REMOTE MGMT > SNMP510
- Dns511
- Introducing Vantage CNM511
- Figure 308 ADVANCED > REMOTE MGMT > DNS511
- Table 156 ADVANCED > REMOTE MGMT > DNS511
- Configuring CNM512
  - Figure 309 ADVANCED > REMOTE MGMT > CNM512
  - Table 157 ADVANCED > REMOTE MGMT > CNM512
  - Additional Configuration for Vantage CNM513
Chapter 27 Upnp515
- Universal Plug and Play Overview515
- Configuring Upnp516
- Figure 310 ADVANCED > Upnp516
- Table 158 ADVANCED > Upnp516
- Displaying Upnp Port Mapping517
- Figure 311 ADVANCED > Upnp > Ports517
- Table 159 ADVANCED > Upnp > Ports517
- Installing Upnp in Windows Example518
  - Installing Upnp in Windows Me519
  - Installing Upnp in Windows XP520
- Using Upnp in Windows XP Example520
  - Auto-Discover Your Upnp-Enabled Network Device521
  - Web Configurator Easy Access522
Chapter 28 Custom Application525
- Custom Application Configuration525
- Figure 312 ADVANCED > Custom APP526
- Table 160 ADVANCED > Custom APP526
Chapter 29 ALG Screen527
- ALG Introduction527
- 528528
- Ftp528
- Rtp528
- Figure 315 H.323 Calls from the WAN with Multiple Outgoing Calls530
- Sip530
  - Stun530
  - SIP ALG Details530
- ALG Screen531
- Figure 316 SIP ALG Example531
- SIP Audio Session Timeout531
- SIP Signaling Session Timeout531
- Figure 317 ADVANCED > ALG532
- Table 161 ADVANCED > ALG532
Reports, Logs and Maintenance533
Part V: Reports, Logs and Maintenance533
Chapter 30 Reports535
- Configuring Reports535
- System Reports Screen535
- IDP Threat Reports Screen540
- Figure 322 REPORTS > THREAT REPORTS > IDP540
- Table 166 Report Specifications540
- Table 167 REPORTS > THREAT REPORTS > IDP541
- Anti-Virus Threat Reports Screen542
- Figure 323 REPORTS > THREAT REPORTS > IDP > Source542
- Figure 324 REPORTS > THREAT REPORTS > IDP > Destination542
- Figure 325 REPORTS > THREAT REPORTS > Anti-Virus542
- Figure 326 REPORTS > THREAT REPORTS > Anti-Virus > Source543
- Table 168 REPORTS > THREAT REPORTS > Anti-Virus543
- Anti-Spam Threat Reports Screen544
- Figure 327 REPORTS > THREAT REPORTS > Anti-Virus > Destination544
- Figure 328 REPORTS > THREAT REPORTS > Anti-Spam544
- Table 169 REPORTS > THREAT REPORTS > Anti-Spam544
- Figure 329 REPORTS > THREAT REPORTS > Anti-Spam > Source546
- Figure 330 REPORTS > THREAT REPORTS > Anti-Spam > Score Distribution546
Chapter 31 Logs Screens547
- Configuring View Log547
- Figure 331 LOGS > View Log547
- Log Description Example548
- Configuring Log Settings550
- Syslog Logs573
- Table 196 Syslog Logs573
- Table 197 RFC-2408 ISAKMP Payload Types574
Chapter 32 Maintenance575
- Maintenance Overview575
- General Setup and System Name575
  - General Setup575
- Configuring Password576
- Figure 335 MAINTENANCE > General Setup576
- Figure 336 MAINTENANCE > Password576
- Table 198 MAINTENANCE > General Setup576
- Time and Date577
- Figure 337 MAINTENANCE > Time and Date577
- Table 199 MAINTENANCE > Password577
- Table 200 MAINTENANCE > Time and Date578
- Pre-Defined NTP Time Server Pools579
  - Resetting the Time580
  - Time Server Synchronization580
  - Figure 338 Synchronization in Process580
  - Figure 339 Synchronization Is Successful580
- Introduction to Transparent Bridging581
- Figure 340 Synchronization Fail581
- Table 201 MAC-Address-To-Port Mapping Table581
- Transparent Firewalls582
- Configuring Device Mode (Router)582
- Configuring Device Mode (Bridge)583
- Figure 341 MAINTENANCE > Device Mode (Router Mode)583
- Table 202 MAINTENANCE > Device Mode (Router Mode)583
- Figure 342 MAINTENANCE > Device Mode (Bridge Mode)584
- Table 203 MAINTENANCE > Device Mode (Bridge Mode)584
- F/W Upload Screen585
- Figure 343 MAINTENANCE > Firmware Upload585
- Table 204 MAINTENANCE > Firmware Upload585
- Figure 344 Firmware Upload in Process586
- Figure 345 Network Temporarily Disconnected586
- Figure 346 Firmware Upload Error586
- Backup and Restore587
  - Backup Configuration587
  - Restore Configuration587
  - Figure 347 MAINTENANCE > Backup and Restore587
  - Table 205 Restore Configuration587
  - Back to Factory Defaults588
  - Figure 348 Configuration Upload Successful588
  - Figure 349 Network Temporarily Disconnected588
  - Figure 350 Configuration Upload Error588
- Restart Screen589
- Diagnostics589
- Figure 351 Reset Warning Message589
- Figure 352 MAINTENANCE > Restart589
- Figure 353 MAINTENANCE > Diagnostics590
- Table 206 MAINTENANCE > Diagnostics590
SMT and Troubleshooting593
Part VI: SMT and Troubleshooting593
Chapter 33595
- Introducing the SMT595
Chapter 34 SMT Menu 1 - General Setup603
- Introduction to General Setup603
- Configuring General Setup603
Chapter 35 WAN and Dial Backup Setup609
- Introduction to WAN and Dial Backup Setup609
- WAN Setup609
- Figure 364 MAC Address Cloning in WAN Setup609
- Dial Backup610
Chapter 36 LAN Setup623
- Introduction to LAN Setup623
- Accessing the LAN Menus623
- LAN Port Filter Setup623
- Figure 373 Menu 3: LAN Setup623
- TCP/IP and DHCP Ethernet Setup Menu624
Chapter 37 Internet Access629
- Introduction to Internet Access Setup629
- Ethernet Encapsulation629
- Figure 378 Menu 4: Internet Access Setup (Ethernet)630
- Table 227 Menu 4: Internet Access Setup (Ethernet)630
- Configuring the PPTP Client631
- Configuring the Pppoe Client632
- Figure 379 Internet Access Setup (PPTP)632
- Table 228 New Fields in Menu 4 (PPTP) Screen632
- Basic Setup Complete633
- Figure 380 Internet Access Setup (Pppoe)633
- Table 229 New Fields in Menu 4 (Pppoe) Screen633
Chapter 38 DMZ Setup635
- Configuring DMZ Setup635
- DMZ Port Filter Setup635
- Figure 381 Menu 5: DMZ Setup635
- Figure 382 Menu 5.1: DMZ Port Filter Setup635
- TCP/IP Setup636
Chapter 39 Route Setup639
- Configuring Route Setup639
- Route Assessment639
- Figure 386 Menu 6: Route Setup639
- Figure 387 Menu 6.1: Route Assessment639
- Traffic Redirect640
- Figure 388 Menu 6.2: Traffic Redirect640
- Table 230 Menu 6.1: Route Assessment640
- Table 231 Menu 6.2: Traffic Redirect640
- Route Failover641
- Figure 389 Menu 6.3: Route Failover641
- Table 232 Menu 6.3: Route Failover641
Chapter 40 Wireless Setup643
- Wireless LAN Setup643
- TCP/IP Setup646
Chapter 41 Remote Node Setup649
- Introduction to Remote Node Setup649
- Figure 395 Menu 11: Remote Node Setup649
- Remote Node Profile Setup650
- Edit IP654
- Figure 398 Menu 11.1: Remote Node Profile for PPTP Encapsulation654
- Table 237 Menu 11.1: Remote Node Profile for PPTP Encapsulation654
- Figure 399 Menu 11.1.2: Remote Node Network Layer Options for Ethernet Encapsulation655
- Table 238 Remote Node Network Layer Options Menu Fields655
- Remote Node Filter656
- Figure 400 Menu 11.1.4: Remote Node Filter (Ethernet Encapsulation)657
- Figure 401 Menu 11.1.4: Remote Node Filter (Pppoe or PPTP Encapsulation)657
- IP Static Route Setup659
Chapter 42 IP Static Route Setup659
- Figure 402 Menu 12: IP Static Route Setup660
- Figure 403 Menu 12. 1: Edit IP Static Route660
- Table 239 Menu 12. 1: Edit IP Static Route660
Chapter 43663
- Network Address Translation (NAT)663
Chapter 44 Introducing the Zywall Firewall683
- Using Zywall SMT Menus683
Chapter 45 Filter Configuration685
- Introduction to Filters685
- Configuring a Filter Set688
- Example Filter694
- Figure 438 Telnet Filter Example694
- Figure 439 Example Filter: Menu 21.1.3.1695
- Figure 440 Example Filter Rules Summary: Menu 21.1.3695
- Filter Types and NAT696
- Firewall Versus Filters696
- Applying a Filter697
Chapter 46 SNMP Configuration701
- Figure 445 Menu 22: SNMP Configuration701
Chapter 47703
- System Information & Diagnosis703
Chapter 48 Firmware and Configuration File Maintenance715
- Introduction715
- Filename Conventions715
- Backup Configuration716
- Restore Configuration720
- Uploading Firmware and Configuration Files723
Chapter 49 System Maintenance Menus 8 to 10729
- Command Interpreter Mode729
- Figure 476 Command Mode in Menu 24729
- Call Control Support730
- Time and Date Setting732
- Figure 480 Menu 24: System Maintenance732
- Figure 481 Menu 24.10 System Maintenance: Time and Date Setting733
- Table 261 Menu 24.10 System Maintenance: Time and Date Setting733
Chapter 50 Remote Management735
- Figure 482 Menu 24.11 - Remote Management Control736
Chapter 51 IP Policy Routing739
- IP Routing Policy Summary739
- Figure 483 Menu 25: Sample IP Routing Policy Summary739
- Table 263 Menu 25: Sample IP Routing Policy Summary739
- IP Routing Policy Setup740
- IP Policy Routing Example743
- Figure 485 Menu 25.1.1: IP Routing Policy Setup743
- Table 266 Menu 25.1.1: IP Routing Policy Setup743
- Figure 486 Example of IP Policy Routing744
- Figure 487 IP Routing Policy Example 1744
- Figure 488 IP Routing Policy Example 2745
Chapter 52 Call Scheduling747
- Introduction to Call Scheduling747
- Figure 489 Schedule Setup747
- Figure 490 Schedule Set Setup748
- Table 267 Schedule Set Setup748
- Figure 491 Applying Schedule Set(S) to a Remote Node (Pppoe)749
- Figure 492 Applying Schedule Set(S) to a Remote Node (PPTP)750
Chapter 53 Troubleshooting751
- Power, Hardware Connections, and Leds751
- Zywall Access and Login752
- Internet Access754
- Wireless Router/Ap Troubleshooting755
- Upnp756
Chapter 54 Product Specifications757
- Table 268 Hardware Specifications757
Part VII: Appendices and Index765
Appendices and Index765
Appendix A Hardware Installation767
- Desktop Installation767
- Figure 495 Attaching Rubber Feet768
- Figure 496 Attaching Mounting Brackets and Screws769
- Figure 497 Rack Mounting769
Appendix B Pop-Up Windows, Javascripts and Java Permissions771
- Figure 498 Pop-Up Blocker771
- Figure 499 Internet Options: Privacy772
- Figure 500 Internet Options: Privacy773
- Figure 501 Pop-Up Blocker Settings773
- Figure 502 Internet Options: Security774
- Figure 503 Security Settings - Java Scripting775
- Figure 504 Security Settings - Java775
- Figure 505 Java (Sun)776
- Figure 506 Mozilla Firefox: Tools > Options777
- Figure 507 Mozilla Firefox Content Security777
Appendix C Removing and Installing a Fuse779
Appendix D Setting up Your Computer's IP Address781
- Figure 508 Windows 95/98/Me: Network: Configuration782
- Figure 509 Windows 95/98/Me: TCP/IP Properties: IP Address783
- Figure 510 Windows 95/98/Me: TCP/IP Properties: DNS Configuration784
- Figure 511 Windows XP: Start Menu785
- Figure 512 Windows XP: Control Panel785
- Figure 513 Windows XP: Control Panel: Network Connections: Properties786
- Figure 514 Windows XP: Local Area Connection Properties786
- Figure 515 Windows XP: Internet Protocol (TCP/IP) Properties787
- Figure 516 Windows XP: Advanced TCP/IP Properties788
- Figure 517 Windows XP: Internet Protocol (TCP/IP) Properties789
- Figure 518 Windows Vista: Start Menu790
- Figure 519 Windows Vista: Control Panel790
- Figure 520 Windows Vista: Network and Internet790
- Figure 521 Windows Vista: Network and Sharing Center790
- Figure 522 Windows Vista: Network and Sharing Center791
- Figure 523 Windows Vista: Local Area Connection Properties791
- Figure 524 Windows Vista: Internet Protocol Version 4 (Tcp/Ipv4) Properties792
- Figure 525 Windows Vista: Advanced TCP/IP Properties793
- Figure 526 Windows Vista: Internet Protocol Version 4 (Tcp/Ipv4) Properties794
- Figure 527 Macintosh os 8/9: Apple Menu795
- Figure 528 Macintosh os 8/9: TCP/IP795
- Figure 529 Macintosh os X: Apple Menu796
- Figure 530 Macintosh os X: Network797
- Figure 531 Red hat 9.0: KDE: Network Configuration: Devices798
- Figure 532 Red hat 9.0: KDE: Ethernet Device: General798
- Figure 533 Red hat 9.0: KDE: Network Configuration: DNS799
- Figure 534 Red hat 9.0: KDE: Network Configuration: Activate799
- Figure 535 Red hat 9.0: Dynamic IP Address Setting in Ifconfig-Eth0800
- Figure 536 Red hat 9.0: Static IP Address Setting in Ifconfig-Eth0800
- Figure 537 Red hat 9.0: DNS Settings in Resolv.conf800
- Figure 538 Red hat 9.0: Restart Ethernet Card800
- Figure 539 Red hat 9.0: Checking TCP/IP Properties801
Appendix E IP Addresses and Subnetting803
- Figure 540 Network Number and Host ID804
- Table 281 IP Address Network Number and Host ID Example804
- Table 282 Subnet Masks805
- Table 283 Maximum Host Numbers805
- Table 284 Alternative Subnet Mask Notation805
- Figure 541 Subnetting Example: before Subnetting806
- Figure 542 Subnetting Example: after Subnetting807
- Table 285 Subnet 1807
- Table 286 Subnet 2808
- Table 287 Subnet 3808
- Table 288 Subnet 4808
- Table 289 Eight Subnets808
- Table 290 24-Bit Network Number Subnet Planning809
- Table 291 16-Bit Network Number Subnet Planning809
- Configuring Ip Addresses810
- Figure 543 Conflicting Computer IP Addresses Example811
- Figure 544 Conflicting Computer IP Addresses Example811
- Figure 545 Conflicting Computer and Router IP Addresses Example812
Appendix F Common Services813
- Table 292 Commonly Used Services813
Appendix G Wireless Lans817
- Figure 546 Peer-To-Peer Communication in an Ad-Hoc Network817
- Figure 547 Basic Service Set818
- Figure 548 Infrastructure WLAN819
- Figure 549 RTS/CTS820
- Table 293 IEEE 802.11G821
- Table 294 Wireless Security Levels822
- Table 295 Comparison of EAP Authentication Types825
- Figure 550 WPA(2) with RADIUS Application Example827
- Figure 551 WPA(2)-PSK Authentication828
- Table 296 Wireless Security Relational Matrix828
Appendix H Windows 98 Se/Me Requirements for Anti-Virus Message Display831
- Figure 552 Windows 98 SE: Winpopup831
- Figure 553 Windows 98 SE: Program Task Bar832
- Figure 554 Windows 98 SE: Task Bar Properties832
- Figure 555 Windows 98 SE: Startup833
- Figure 556 Windows 98 SE: Startup: Create Shortcut833
- Figure 557 Windows 98 SE: Startup: Select a Title for the Program834
- Figure 558 Windows 98 SE: Startup: Shortcut834
Appendix I VPN Setup835
- General Notes835
- Figure 559 VPN Rules836
- Figure 560 Headquarters Gateway Policy Edit837
- Figure 561 Branch Office Gateway Policy Edit838
- Figure 562 Headquarters VPN Rule839
- Figure 563 Branch Office VPN Rule839
- Figure 564 Headquarters Network Policy Edit840
- Figure 565 Branch Office Network Policy Edit841
- Figure 566 VPN Rule Configured842
- Figure 567 VPN Dial842
- Figure 568 VPN Tunnel Established842
- Figure 569 VPN Log Example844
- Figure 570 Ike/Ipsec Debug Example845
Appendix J Importing Certificates847
- Figure 571 Security Certificate847
- Figure 572 Login Screen848
- Figure 573 Certificate General Information before Import848
- Figure 574 Certificate Import Wizard 1849
- Figure 575 Certificate Import Wizard 2849
- Figure 576 Certificate Import Wizard 3850
- Figure 577 Root Certificate Store850
- Figure 578 Certificate General Information after Import851
Appendix K Legal Information853
Appendix L Customer Support857
Index863

ZyXEL Communications ZYWALL 35 - VPN Rules (IKE) Gateway Policy Edit

Table of Contents

Other manuals for ZyXEL Communications ZYWALL 35

Related product manuals