ZyXEL Communications ZYWALL USG 20

To Next Page

To Previous Page

Document Conventions

ZyWALL USG 20/20W User’s Guide

Icons Used in Figures

Figures in this User’s Guide may use the following generic icons. The ZyWALL icon

is not an exact representation of your device.

ZyWALL Computer Notebook computer

Server Firewall Telephone

Switch Router

Main Page

About this User's Guide3
Document Conventions6
Safety Warnings8
Contents Overview9
- Table of Contents9
Table of Contents11
User's Guide27
PART I User's Guide27
Chapter 1 Introducing the Zywall29
- Overview and Key Default Settings29
- Wall-Mounting29
- Front Panel32
  - Front Panel Leds32
- Management Overview33
- Starting and Stopping the Zywall34
Chapter 2 Features and Applications37
- Features37
- Applications39
- Web Configurator43
Chapter 3 Web Configurator43
- Web Configurator Requirements43
- Web Configurator Access43
- Web Configurator Screens Overview45
Chapter 4 Installation Setup Wizard59
- Installation Setup Wizard Screens59
- Device Registration65
- Quick Setup69
Chapter 5 Quick Setup69
- Quick Setup Overview69
- WAN Interface Quick Setup70
- VPN Quick Setup75
- VPN Setup Wizard: Wizard Type76
- VPN Express Wizard - Scenario77
Chapter 6 Configuration Basics87
- Object-Based Configuration87
- Zones, Interfaces, and Physical Ports88
  - Interface Types89
  - Default Interface and Zone Configuration90
- Terminology in the Zywall91
- Packet Flow91
  - Routing Table Checking Flow92
  - NAT Table Checking Flow94
- Feature Configuration Overview95
- Objects103
  - User/Group104
- System105
- Tutorials107
Chapter 7 Tutorials107
- How to Configure Interfaces, Port Roles, and Zones107
- How to Configure a Cellular Interface111
- How to Configure Load Balancing113
  - Set up Available Bandwidth on Ethernet Interfaces113
  - Configure the WAN Trunk114
- How to Set up an Ipsec VPN Tunnel116
- How to Configure User-Aware Access Control120
- How to Use a RADIUS Server to Authenticate User Accounts Based on Groups124
- How to Use Endpoint Security and Authentication Policies126
  - Configure the Endpoint Security Objects126
  - Configure the Authentication Policy128
- How to Configure Service Control129
  - Allow HTTPS Administrator Access Only from the LAN130
- How to Allow Incoming H.323 Peer-To-Peer Calls132
- How to Allow Public Access to a Web Server136
- How to Use an IPPBX on the DMZ139
- How to Use Multiple Static Public WAN IP Addresses for LAN to WAN Traffic145
  - Create the Public IP Address Range Object145
  - Configure the Policy Route146
- How to Set up a Wireless LAN146
Technical Reference163
Part II: Technical Reference163
- Dashboard165
Chapter 8 Dashboard165
- Overview165
  - What You Can Do in this Chapter165
- The Dashboard Screen165
- Monitor177
Chapter 9 Monitor177
- Overview177
  - What You Can Do in this Chapter177
- The Port Statistics Screen178
  - The Port Statistics Graph Screen180
- Interface Status Screen181
- The Traffic Statistics Screen183
- The Session Monitor Screen186
- The DDNS Status Screen189
- IP/MAC Binding Monitor189
- The Login Users Screen190
- WLAN Status Screen191
- The Following Table Describes the Labels in this Menu.cellular Status Screen192
  - More Information194
- USB Storage Screen195
- The Ipsec Monitor Screen196
  - Regular Expressions in Searching Ipsec Sas198
- The SSL Connection Monitor Screen198
- The Content Filter Statistics Screen200
- Content Filter Cache Screen202
- The Anti-Spam Statistics Screen204
- The Anti-Spam Status Screen206
- Log Screen207
- Registration211
Chapter 10 Registration211
- Overview211
  - What You Can Do in this Chapter211
  - What You Need to Know211
- The Registration Screen212
- The Service Screen214
Chapter 11 Interfaces217
- Interface Overview217
- Port Role220
- Ethernet Summary Screen222
  - Ethernet Edit223
  - Object References232
- PPP Interfaces233
  - PPP Interface Summary234
  - PPP Interface Add or Edit235
- Cellular Configuration Screen (3G)239
  - Cellular Add/Edit Screen241
- WLAN Interface General Screen248
- WLAN Interface MAC Filter262
- VLAN Interfaces264
  - VLAN Summary Screen266
  - VLAN Add/Edit267
- Bridge Interfaces274
- Interface Technical Reference284
Chapter 12 Trunks289
- Overview289
  - What You Can Do in this Chapter289
  - What You Need to Know290
- The Trunk Summary Screen292
- Configuring a Trunk293
- Trunk Technical Reference295
Chapter 13 Policy and Static Routes297
- Policy and Static Routes Overview297
  - What You Can Do in this Chapter297
  - What You Need to Know298
- Policy Route Screen300
  - Policy Route Edit Screen303
- IP Static Route Screen307
  - Static Route Add/Edit Screen308
- Policy Routing Technical Reference309
  - Port Triggering310
  - Maximize Bandwidth Usage311
Chapter 14 Routing Protocols313
- Routing Protocols Overview313
  - What You Can Do in this Chapter313
  - What You Need to Know313
- The RIP Screen314
- The OSPF Screen315
- Routing Protocol Technical Reference324
Chapter 15 Zones327
- Zones Overview327
  - What You Can Do in this Chapter327
  - What You Need to Know328
- The Zone Screen329
- Zone Edit330
- Ddns331
Chapter 16 DDNS331
- DDNS Overview331
  - What You Can Do in this Chapter331
  - What You Need to Know331
- The DDNS Screen332
  - The Dynamic DNS Add/Edit Screen334
- Nat337
Chapter 17 NAT337
- NAT Overview337
  - What You Can Do in this Chapter337
  - What You Need to Know338
- The NAT Screen338
  - The NAT Add/Edit Screen340
- NAT Technical Reference343
- HTTP Redirect347
Chapter 18 HTTP Redirect347
- Overview347
  - What You Can Do in this Chapter347
  - What You Need to Know348
- The HTTP Redirect Screen349
  - The HTTP Redirect Edit Screen350
- Alg351
Chapter 19 ALG351
- ALG Overview351
- The ALG Screen355
- ALG Technical Reference357
- IP/MAC Binding359
Chapter 20 IP/MAC Binding359
- IP/MAC Binding Overview359
  - What You Can Do in this Chapter359
  - What You Need to Know360
- IP/MAC Binding Summary360
  - IP/MAC Binding Edit361
  - Static DHCP Edit362
- IP/MAC Binding Exempt List363
Chapter 21 Authentication Policy365
- Overview365
  - What You Can Do in this Chapter365
  - What You Need to Know366
- Authentication Policy Screen366
  - Creating/Editing an Authentication Policy369
- Firewall373
Chapter 22 Firewall373
- Overview373
- The Firewall Screen381
  - Configuring the Firewall Screen382
  - The Firewall Add/Edit Screen385
- The Session Limit Screen386
  - The Session Limit Add/Edit Screen388
Chapter 23391
- Ipsec VPN391
Chapter 24 SSL VPN427
- Overview427
  - What You Can Do in this Chapter427
  - What You Need to Know427
- The SSL Access Privilege Screen429
  - The SSL Access Policy Add/Edit Screen430
- The SSL Global Setting Screen433
  - How to Upload a Custom Logo434
- Establishing an SSL VPN Connection435
Chapter 25 SSL User Screens437
- Overview437
  - What You Need to Know437
- Remote User Login438
- The SSL VPN User Screens443
- Bookmarking the Zywall444
- Logging out of the SSL VPN User Screens444
Chapter 26 SSL User Application Screens447
- SSL User Application Screens Overview447
- The Application Screen447
Chapter 27 Zywall Secuextender449
- The Zywall Secuextender Icon449
- Statistics450
- View Log451
- Suspend and Resume the Connection451
- Stop the Connection452
- Uninstalling the Zywall Secuextender452
Chapter 28 Bandwidth Management453
- Overview453
- Thebandwidth Management Screen461
  - The Bandwidth Management Add/Edit Screen463
Chapter 29 ADP467
- Overview467
- The ADP General Screen469
- The Profile Summary Screen470
- ADP Technical Reference479
Chapter 30 Content Filtering487
- Overview487
- Content Filter General Screen489
- Content Filter Policy Add or Edit Screen492
- Content Filter Profile Screen494
- Content Filter Categories Screen494
  - Content Filter Blocked and Warning Messages508
- Content Filter Customization Screen508
- Content Filter Technical Reference511
Chapter 31513
- Content Filter Reports513
Chapter 32 Anti-Spam521
- Overview521
  - What You Can Do in this Chapter521
  - What You Need to Know521
- Before You Begin523
- The Anti-Spam General Screen523
  - The Anti-Spam Policy Add or Edit Screen525
- The Anti-Spam Black List Screen527
  - The Anti-Spam Black or White List Add/Edit Screen529
  - Regular Expressions in Black or White List Entries530
- The Anti-Spam White List Screen531
- The DNSBL Screen532
- Anti-Spam Technical Reference534
- User/Group539
Chapter 33 User/Group539
- Overview539
  - What You Can Do in this Chapter539
  - What You Need to Know539
- User Summary Screen542
  - User Add/Edit Screen542
- User Group Summary Screen545
  - Group Add/Edit Screen546
- Setting Screen547
  - Default User Authentication Timeout Settings Edit Screens550
  - User Aware Login Example552
- User /Group Technical Reference553
- Addresses555
Chapter 34 Addresses555
- Overview555
  - What You Can Do in this Chapter555
  - What You Need to Know555
- Address Summary Screen555
  - Address Add/Edit Screen557
- Address Group Summary Screen558
  - Address Group Add/Edit Screen559
- Services561
Chapter 35 Services561
- Overview561
  - What You Can Do in this Chapter561
  - What You Need to Know561
- The Service Summary Screen562
  - The Service Add/Edit Screen564
- The Service Group Summary Screen564
  - The Service Group Add/Edit Screen566
- Schedules567
Chapter 36 Schedules567
- Overview567
  - What You Can Do in this Chapter567
  - What You Need to Know567
- The Schedule Summary Screen568
  - The One-Time Schedule Add/Edit Screen569
  - The Recurring Schedule Add/Edit Screen570
Chapter 37 AAA Server573
- Overview573
- Active Directory or LDAP Server Summary577
  - Adding an Active Directory or LDAP Server577
- RADIUS Server Summary579
  - Adding a RADIUS Server581
Chapter 38 Authentication Method583
- Overview583
- Authentication Method Objects584
  - Creating an Authentication Method Object585
- Certificates589
Chapter 39 Certificates589
- Overview589
- The My Certificates Screen593
- The Trusted Certificates Screen603
  - The Trusted Certificates Edit Screen604
  - The Trusted Certificates Import Screen608
- Certificates Technical Reference609
Chapter 40 ISP Accounts611
- Overview611
  - What You Can Do in this Chapter611
- ISP Account Summary611
  - ISP Account Edit612
Chapter 41 SSL Application615
- Overview615
- The SSL Application Screen617
  - Creating/Editing a Web-Based SSL Application Object618
Chapter 42 Endpoint Security621
- Overview621
  - What You Can Do in this Chapter622
  - What You Need to Know622
- Endpoint Security Screen623
- Endpoint Security Add/Edit624
Chapter 43 System629
- Overview629
  - What You Can Do in this Chapter629
- Host Name630
- USB Storage631
- Date and Time631
  - Pre-Defined NTP Time Servers List634
  - Time Server Synchronization635
- Console Port Speed636
- DNS Overview636
- WWW Overview644
- Ssh661
- Telnet666
  - Configuring Telnet667
- Ftp668
  - Configuring FTP668
- Snmp670
- Vantage CNM674
  - Configuring Vantage CNM675
- Language Screen677
- Log and Report679
Chapter 44 Log and Report679
- Overview679
  - What You Can Do in this Chapter679
- Email Daily Report679
- Log Setting Screens681
- File Manager693
Chapter 45 File Manager693
- Overview693
- The Configuration File Screen696
- The Firmware Package Screen700
- The Shell Script Screen702
  - Diagnostics705
Chapter 46 Diagnostics705
- Overview705
  - What You Can Do in this Chapter705
- The Diagnostic Screen705
  - The Diagnostics Files Screen706
- The Packet Capture Screen707
  - The Packet Capture Files Screen710
  - Example of Viewing a Packet Capture File711
- Core Dump Screen712
  - Core Dump Files Screen713
- The System Log Screen714
- Packet Flow Explore715
Chapter 47 Packet Flow Explore715
- Overview715
  - What You Can Do in this Chapter715
- The Routing Status Screen715
- The SNAT Status Screen719
Chapter 48 Reboot723
- Overview723
  - What You Need to Know723
- The Reboot Screen723
Chapter 49725
- Shutdown725
Chapter 50 Troubleshooting727
- Resetting the Zywall738
- Getting more Troubleshooting Help739
Chapter 51 Product Specifications741
- Power Adaptor Specifications745
Appendix A Log Descriptions747
- Myzyxel.com Logs758
Appendix B Common Services799
Appendix C Wireless Lans803
- Wireless Lan Topologies803
- Fragmentation Threshold807
- Preamble Type807
- Wireless Security Overview808
- Dynamic Wep Key Exchange811
- Security Parameters Summary816
- Antenna Characteristics817
- Types of Antennas for Wlan817
- Positioning Antennas818
Appendix D Importing Certificates819
Appendix E Open Software Announcements845
Appendix F Legal Information935
- Zyxel Limited Warranty937
Index939

ZyXEL Communications ZYWALL USG 20 - Page 7

Table of Contents

Other manuals for ZyXEL Communications ZYWALL USG 20

Related product manuals