ZyXEL Communications ZyWALL USG 100 Series - Terminology in the Zywall

Chapter 6 Configuration Basics
ZyWALL USG 100/200 Series User’s Guide
95
Table 14 ZyWALL USG 100 Default Port, Interface, and Zone Configuration
• The WAN zone contains the wan1 and wan2 interfaces (physical ports P1 and
P2). They use public IP addresses to connect to the Internet.
• OPT is specific to the ZyWALL USG 200.The OPT zone contains the opt interface
(physical port P3). The opt interface is the only default interface that you can
change to be part of a different zone. The opt interface belongs to the OPT zone
by default. The OPT zone is a separate zone and you can configure a different
set of security policies for it.
• The LAN1 zone contains the lan1 interface (a port group made up of physical
ports P4 and P5 on the ZyWALL USG 200 or P3, P4, and P5 on the ZyWALL
USG 100). The LAN1 zone is a protected zone. The lan1 interface uses
192.168.1.1 and the connected devices use IP addresses in the 192.168.1.2 to
192.168.1.254 range.
• The WLAN zone contains the ext-wlan interface (physical port P6). This is a
second protected zone for connecting wireless access points. The ext-wlan
interface uses private IP address 10.59.0.1 and the connected devices use IP
addresses in the 10.59.0.2 to 10.59.0.254 range.
• The DMZ zone contains the dmz interface (physical port P7). The DMZ zone has
servers that are available to the public. The dmz interface uses private IP
address 192.168.3.1 and the connected devices use private IP addresses in the
192.168.3.2 to 192.168.3.254 range.
6.3 Terminology in the ZyWALL
This section highlights some differences in terminology or organization between
the ZLD-based ZyWALL and other routers, particularly ZyNOS routers.
PORT INTERFACE ZONE
IP ADDRESS AND
DHCP SETTINGS
SUGGESTED USE WITH
DEFAULT SETTINGS
P1, P2 wan1, wan2 WAN DHCP clients Connections to the
Internet
P3, P4 lan1 LAN1 192.168.1.1, DHCP
server enabled
Protected LAN
P5 lan2 LAN2 192.168.2.1, DHCP
server enabled
Protected LAN
P6 ext-wlan WLAN 10.59.0.1, DHCP server
enabled
Wireless access points
P7 dmz DMZ 192.168.3.1, DHCP
server enabled
Public servers (such as
web, e-mail and FTP)
AUX aux None None Auxiliary modem
CONSOLE n/a None None Local management
Table 15 ZLD ZyWALL Terminology That is Different Than ZyNOS
ZYNOS FEATURE / TERM ZLD ZYWALL FEATURE / TERM
IP alias Virtual interface
Gateway policy VPN gateway