ZyXEL Communications ZYWALL USG 20

To Next Page

To Previous Page

Chapter 23 IPSec VPN

ZyWALL USG 20/20W User’s Guide

397

Figure 241 Configuration > VPN > IPSec VPN > VPN Connection > Edit (IKE)

Main Page

About this User's Guide3
Document Conventions6
Safety Warnings8
Contents Overview9
- Table of Contents9
Table of Contents11
User's Guide27
PART I User's Guide27
Chapter 1 Introducing the Zywall29
- Overview and Key Default Settings29
- Wall-Mounting29
- Front Panel32
  - Front Panel Leds32
- Management Overview33
- Starting and Stopping the Zywall34
Chapter 2 Features and Applications37
- Features37
- Applications39
- Web Configurator43
Chapter 3 Web Configurator43
- Web Configurator Requirements43
- Web Configurator Access43
- Web Configurator Screens Overview45
Chapter 4 Installation Setup Wizard59
- Installation Setup Wizard Screens59
- Device Registration65
- Quick Setup69
Chapter 5 Quick Setup69
- Quick Setup Overview69
- WAN Interface Quick Setup70
- VPN Quick Setup75
- VPN Setup Wizard: Wizard Type76
- VPN Express Wizard - Scenario77
Chapter 6 Configuration Basics87
- Object-Based Configuration87
- Zones, Interfaces, and Physical Ports88
  - Interface Types89
  - Default Interface and Zone Configuration90
- Terminology in the Zywall91
- Packet Flow91
  - Routing Table Checking Flow92
  - NAT Table Checking Flow94
- Feature Configuration Overview95
- Objects103
  - User/Group104
- System105
- Tutorials107
Chapter 7 Tutorials107
- How to Configure Interfaces, Port Roles, and Zones107
- How to Configure a Cellular Interface111
- How to Configure Load Balancing113
  - Set up Available Bandwidth on Ethernet Interfaces113
  - Configure the WAN Trunk114
- How to Set up an Ipsec VPN Tunnel116
- How to Configure User-Aware Access Control120
- How to Use a RADIUS Server to Authenticate User Accounts Based on Groups124
- How to Use Endpoint Security and Authentication Policies126
  - Configure the Endpoint Security Objects126
  - Configure the Authentication Policy128
- How to Configure Service Control129
  - Allow HTTPS Administrator Access Only from the LAN130
- How to Allow Incoming H.323 Peer-To-Peer Calls132
- How to Allow Public Access to a Web Server136
- How to Use an IPPBX on the DMZ139
- How to Use Multiple Static Public WAN IP Addresses for LAN to WAN Traffic145
  - Create the Public IP Address Range Object145
  - Configure the Policy Route146
- How to Set up a Wireless LAN146
Technical Reference163
Part II: Technical Reference163
- Dashboard165
Chapter 8 Dashboard165
- Overview165
  - What You Can Do in this Chapter165
- The Dashboard Screen165
- Monitor177
Chapter 9 Monitor177
- Overview177
  - What You Can Do in this Chapter177
- The Port Statistics Screen178
  - The Port Statistics Graph Screen180
- Interface Status Screen181
- The Traffic Statistics Screen183
- The Session Monitor Screen186
- The DDNS Status Screen189
- IP/MAC Binding Monitor189
- The Login Users Screen190
- WLAN Status Screen191
- The Following Table Describes the Labels in this Menu.cellular Status Screen192
  - More Information194
- USB Storage Screen195
- The Ipsec Monitor Screen196
  - Regular Expressions in Searching Ipsec Sas198
- The SSL Connection Monitor Screen198
- The Content Filter Statistics Screen200
- Content Filter Cache Screen202
- The Anti-Spam Statistics Screen204
- The Anti-Spam Status Screen206
- Log Screen207
- Registration211
Chapter 10 Registration211
- Overview211
  - What You Can Do in this Chapter211
  - What You Need to Know211
- The Registration Screen212
- The Service Screen214
Chapter 11 Interfaces217
- Interface Overview217
- Port Role220
- Ethernet Summary Screen222
  - Ethernet Edit223
  - Object References232
- PPP Interfaces233
  - PPP Interface Summary234
  - PPP Interface Add or Edit235
- Cellular Configuration Screen (3G)239
  - Cellular Add/Edit Screen241
- WLAN Interface General Screen248
- WLAN Interface MAC Filter262
- VLAN Interfaces264
  - VLAN Summary Screen266
  - VLAN Add/Edit267
- Bridge Interfaces274
- Interface Technical Reference284
Chapter 12 Trunks289
- Overview289
  - What You Can Do in this Chapter289
  - What You Need to Know290
- The Trunk Summary Screen292
- Configuring a Trunk293
- Trunk Technical Reference295
Chapter 13 Policy and Static Routes297
- Policy and Static Routes Overview297
  - What You Can Do in this Chapter297
  - What You Need to Know298
- Policy Route Screen300
  - Policy Route Edit Screen303
- IP Static Route Screen307
  - Static Route Add/Edit Screen308
- Policy Routing Technical Reference309
  - Port Triggering310
  - Maximize Bandwidth Usage311
Chapter 14 Routing Protocols313
- Routing Protocols Overview313
  - What You Can Do in this Chapter313
  - What You Need to Know313
- The RIP Screen314
- The OSPF Screen315
- Routing Protocol Technical Reference324
Chapter 15 Zones327
- Zones Overview327
  - What You Can Do in this Chapter327
  - What You Need to Know328
- The Zone Screen329
- Zone Edit330
- Ddns331
Chapter 16 DDNS331
- DDNS Overview331
  - What You Can Do in this Chapter331
  - What You Need to Know331
- The DDNS Screen332
  - The Dynamic DNS Add/Edit Screen334
- Nat337
Chapter 17 NAT337
- NAT Overview337
  - What You Can Do in this Chapter337
  - What You Need to Know338
- The NAT Screen338
  - The NAT Add/Edit Screen340
- NAT Technical Reference343
- HTTP Redirect347
Chapter 18 HTTP Redirect347
- Overview347
  - What You Can Do in this Chapter347
  - What You Need to Know348
- The HTTP Redirect Screen349
  - The HTTP Redirect Edit Screen350
- Alg351
Chapter 19 ALG351
- ALG Overview351
- The ALG Screen355
- ALG Technical Reference357
- IP/MAC Binding359
Chapter 20 IP/MAC Binding359
- IP/MAC Binding Overview359
  - What You Can Do in this Chapter359
  - What You Need to Know360
- IP/MAC Binding Summary360
  - IP/MAC Binding Edit361
  - Static DHCP Edit362
- IP/MAC Binding Exempt List363
Chapter 21 Authentication Policy365
- Overview365
  - What You Can Do in this Chapter365
  - What You Need to Know366
- Authentication Policy Screen366
  - Creating/Editing an Authentication Policy369
- Firewall373
Chapter 22 Firewall373
- Overview373
- The Firewall Screen381
  - Configuring the Firewall Screen382
  - The Firewall Add/Edit Screen385
- The Session Limit Screen386
  - The Session Limit Add/Edit Screen388
Chapter 23391
- Ipsec VPN391
Chapter 24 SSL VPN427
- Overview427
  - What You Can Do in this Chapter427
  - What You Need to Know427
- The SSL Access Privilege Screen429
  - The SSL Access Policy Add/Edit Screen430
- The SSL Global Setting Screen433
  - How to Upload a Custom Logo434
- Establishing an SSL VPN Connection435
Chapter 25 SSL User Screens437
- Overview437
  - What You Need to Know437
- Remote User Login438
- The SSL VPN User Screens443
- Bookmarking the Zywall444
- Logging out of the SSL VPN User Screens444
Chapter 26 SSL User Application Screens447
- SSL User Application Screens Overview447
- The Application Screen447
Chapter 27 Zywall Secuextender449
- The Zywall Secuextender Icon449
- Statistics450
- View Log451
- Suspend and Resume the Connection451
- Stop the Connection452
- Uninstalling the Zywall Secuextender452
Chapter 28 Bandwidth Management453
- Overview453
- Thebandwidth Management Screen461
  - The Bandwidth Management Add/Edit Screen463
Chapter 29 ADP467
- Overview467
- The ADP General Screen469
- The Profile Summary Screen470
- ADP Technical Reference479
Chapter 30 Content Filtering487
- Overview487
- Content Filter General Screen489
- Content Filter Policy Add or Edit Screen492
- Content Filter Profile Screen494
- Content Filter Categories Screen494
  - Content Filter Blocked and Warning Messages508
- Content Filter Customization Screen508
- Content Filter Technical Reference511
Chapter 31513
- Content Filter Reports513
Chapter 32 Anti-Spam521
- Overview521
  - What You Can Do in this Chapter521
  - What You Need to Know521
- Before You Begin523
- The Anti-Spam General Screen523
  - The Anti-Spam Policy Add or Edit Screen525
- The Anti-Spam Black List Screen527
  - The Anti-Spam Black or White List Add/Edit Screen529
  - Regular Expressions in Black or White List Entries530
- The Anti-Spam White List Screen531
- The DNSBL Screen532
- Anti-Spam Technical Reference534
- User/Group539
Chapter 33 User/Group539
- Overview539
  - What You Can Do in this Chapter539
  - What You Need to Know539
- User Summary Screen542
  - User Add/Edit Screen542
- User Group Summary Screen545
  - Group Add/Edit Screen546
- Setting Screen547
  - Default User Authentication Timeout Settings Edit Screens550
  - User Aware Login Example552
- User /Group Technical Reference553
- Addresses555
Chapter 34 Addresses555
- Overview555
  - What You Can Do in this Chapter555
  - What You Need to Know555
- Address Summary Screen555
  - Address Add/Edit Screen557
- Address Group Summary Screen558
  - Address Group Add/Edit Screen559
- Services561
Chapter 35 Services561
- Overview561
  - What You Can Do in this Chapter561
  - What You Need to Know561
- The Service Summary Screen562
  - The Service Add/Edit Screen564
- The Service Group Summary Screen564
  - The Service Group Add/Edit Screen566
- Schedules567
Chapter 36 Schedules567
- Overview567
  - What You Can Do in this Chapter567
  - What You Need to Know567
- The Schedule Summary Screen568
  - The One-Time Schedule Add/Edit Screen569
  - The Recurring Schedule Add/Edit Screen570
Chapter 37 AAA Server573
- Overview573
- Active Directory or LDAP Server Summary577
  - Adding an Active Directory or LDAP Server577
- RADIUS Server Summary579
  - Adding a RADIUS Server581
Chapter 38 Authentication Method583
- Overview583
- Authentication Method Objects584
  - Creating an Authentication Method Object585
- Certificates589
Chapter 39 Certificates589
- Overview589
- The My Certificates Screen593
- The Trusted Certificates Screen603
  - The Trusted Certificates Edit Screen604
  - The Trusted Certificates Import Screen608
- Certificates Technical Reference609
Chapter 40 ISP Accounts611
- Overview611
  - What You Can Do in this Chapter611
- ISP Account Summary611
  - ISP Account Edit612
Chapter 41 SSL Application615
- Overview615
- The SSL Application Screen617
  - Creating/Editing a Web-Based SSL Application Object618
Chapter 42 Endpoint Security621
- Overview621
  - What You Can Do in this Chapter622
  - What You Need to Know622
- Endpoint Security Screen623
- Endpoint Security Add/Edit624
Chapter 43 System629
- Overview629
  - What You Can Do in this Chapter629
- Host Name630
- USB Storage631
- Date and Time631
  - Pre-Defined NTP Time Servers List634
  - Time Server Synchronization635
- Console Port Speed636
- DNS Overview636
- WWW Overview644
- Ssh661
- Telnet666
  - Configuring Telnet667
- Ftp668
  - Configuring FTP668
- Snmp670
- Vantage CNM674
  - Configuring Vantage CNM675
- Language Screen677
- Log and Report679
Chapter 44 Log and Report679
- Overview679
  - What You Can Do in this Chapter679
- Email Daily Report679
- Log Setting Screens681
- File Manager693
Chapter 45 File Manager693
- Overview693
- The Configuration File Screen696
- The Firmware Package Screen700
- The Shell Script Screen702
  - Diagnostics705
Chapter 46 Diagnostics705
- Overview705
  - What You Can Do in this Chapter705
- The Diagnostic Screen705
  - The Diagnostics Files Screen706
- The Packet Capture Screen707
  - The Packet Capture Files Screen710
  - Example of Viewing a Packet Capture File711
- Core Dump Screen712
  - Core Dump Files Screen713
- The System Log Screen714
- Packet Flow Explore715
Chapter 47 Packet Flow Explore715
- Overview715
  - What You Can Do in this Chapter715
- The Routing Status Screen715
- The SNAT Status Screen719
Chapter 48 Reboot723
- Overview723
  - What You Need to Know723
- The Reboot Screen723
Chapter 49725
- Shutdown725
Chapter 50 Troubleshooting727
- Resetting the Zywall738
- Getting more Troubleshooting Help739
Chapter 51 Product Specifications741
- Power Adaptor Specifications745
Appendix A Log Descriptions747
- Myzyxel.com Logs758
Appendix B Common Services799
Appendix C Wireless Lans803
- Wireless Lan Topologies803
- Fragmentation Threshold807
- Preamble Type807
- Wireless Security Overview808
- Dynamic Wep Key Exchange811
- Security Parameters Summary816
- Antenna Characteristics817
- Types of Antennas for Wlan817
- Positioning Antennas818
Appendix D Importing Certificates819
Appendix E Open Software Announcements845
Appendix F Legal Information935
- Zyxel Limited Warranty937
Index939

ZyXEL Communications ZYWALL USG 20 - Page 397

Table of Contents

Other manuals for ZyXEL Communications ZYWALL USG 20

Related product manuals