ZyXEL Communications ZyWALL USG 300

To Next Page

To Previous Page

Document Conventions

ZyWALL USG 300 User’s Guide

Icons Used in Figures

Figures in this User’s Guide may use the following generic icons. The ZyWALL icon

is not an exact representation of your device.

ZyWALL Computer Notebook computer

Server Firewall Telephone

Switch Router

Main Page

About this User's Guide3
Document Conventions6
- Syntax Conventions6
Safety Warnings8
Contents Overview9
- Table of Contents9
Table of Contents11
User's Guide31
PART I User's Guide31
Chapter 1 Introducing the Zywall33
- Overview and Key Default Settings33
- Rack-Mounted Installation33
  - Rack-Mounted Installation Procedure34
- Front Panel35
  - Front Panel Leds35
- Management Overview35
- Starting and Stopping the Zywall37
Chapter 2 Features and Applications39
- Features39
- Applications41
- Web Configurator47
Chapter 3 Web Configurator47
- Web Configurator Requirements47
- Web Configurator Access47
- Web Configurator Screens Overview49
Ssl Vpn54
- Main Window57
- Tables and Lists59
- Working with Table Entries62
Chapter 4 Installation Setup Wizard65
- Installation Setup Wizard Screens65
- Device Registration72
- Quick Setup75
Chapter 5 Quick Setup75
- Quick Setup Overview75
- WAN Interface Quick Setup76
- VPN Quick Setup81
- VPN Setup Wizard: Wizard Type82
- VPN Express Wizard - Scenario83
Chapter 6 Configuration Basics93
- Object-Based Configuration93
- Zones, Interfaces, and Physical Ports94
  - Interface Types95
  - Default Interface and Zone Configuration96
- Terminology in the Zywall97
- Packet Flow98
- Feature Configuration Overview101
- Objects112
  - User/Group112
- System113
Chapter 7 Tutorials117
- How to Configure Interfaces, Port Grouping, and Zones117
  - Configure a WAN Ethernet Interface118
- Configure Zones118
- Configure Port Grouping119
- How to Configure a Cellular Interface120
- How to Configure Load Balancing122
  - Set up Available Bandwidth on Ethernet Interfaces123
  - Configure the WAN Trunk124
- How to Set up a Wireless LAN125
- How to Set up an Ipsec VPN Tunnel141
- How to Configure a Hub-And-Spoke Ipsec VPN Without a VPN Concentrator144
- How to Configure User-Aware Access Control146
- How to Use a RADIUS Server to Authenticate User Accounts Based on Groups155
- How to Use Endpoint Security and Authentication Policies157
  - Configure the Endpoint Security Objects157
  - Configure the Authentication Policy159
- How to Configure Service Control160
  - Allow HTTPS Administrator Access Only from the LAN161
- How to Allow Incoming H.323 Peer-To-Peer Calls163
- How to Allow Public Access to a Web Server167
- How to Use an IPPBX on the DMZ170
- How to Use Multiple Static Public WAN IP Addresses for LAN to WAN Traffic176
Chapter 8 L2TP VPN Example185
- Configuring the Default L2TP VPN Gateway Example185
- Configuring the Default L2TP VPN Connection Example187
- Configuring the L2TP VPN Settings Example188
- Configuring L2TP VPN in Windows Vista, XP, or 2000189
Technical Reference221
Part II: Technical Reference221
- Dashboard223
Chapter 9 Dashboard223
- Overview223
  - What You Can Do in this Chapter223
- The Dashboard Screen223
Chapter 10 Monitor237
- Overview237
  - What You Can Do in this Chapter237
- The Port Statistics Screen238
  - The Port Statistics Graph Screen240
- Interface Status Screen241
- The Traffic Statistics Screen245
- The Session Monitor Screen248
- The DDNS Status Screen250
- IP/MAC Binding Monitor251
- The Login Users Screen252
- WLAN Interface Station Monitor Screen253
- Cellular Status Screen254
- USB Storage Screen256
- Application Patrol Statistics257
  - Application Patrol Statistics: General Setup258
  - Application Patrol Statistics: Bandwidth Statistics259
  - Application Patrol Statistics: Protocol Statistics260
  - Application Patrol Statistics: Individual Protocol Statistics by Rule261
- The Ipsec Monitor Screen262
  - Regular Expressions in Searching Ipsec Sas264
- The SSL Connection Monitor Screen265
- L2TP over Ipsec Session Monitor Screen266
- The Anti-Virus Statistics Screen267
- The IDP Statistics Screen269
- The Content Filter Statistics Screen271
- Content Filter Cache Screen272
- The Anti-Spam Statistics Screen275
- The Anti-Spam Status Screen277
- Log Screen278
- Registration281
Chapter 11 Registration281
- Overview281
  - What You Can Do in this Chapter281
  - What You Need to Know281
- The Registration Screen283
- The Service Screen286
Chapter 12 Signature Update289
- Overview289
  - What You Can Do in this Chapter289
  - What You Need to Know289
- The Antivirus Update Screen290
- The Idp/Apppatrol Update Screen291
- The System Protect Update Screen293
- Interfaces295
Chapter 13 Interfaces295
- Interface Overview295
Add333
- WLAN Add/Edit: WEP Security335
- WLAN Add/Edit: WPA-PSK/WPA2-PSK Security336
- WLAN Add/Edit: WPA/WPA2 Security337
Chapter 14 Trunks369
- Overview369
Chapter 15379
Policy and Static Routes379
- Policy and Static Routes Overview379
  - What You Can Do in this Chapter379
  - What You Need to Know380
- Policy Route Screen382
  - Policy Route Edit Screen385
- IP Static Route Screen389
  - Static Route Add/Edit Screen390
- Policy Routing Technical Reference391
  - Port Triggering392
  - Maximize Bandwidth Usage393
Chapter 16 Routing Protocols395
- Routing Protocols Overview395
  - What You Can Do in this Chapter395
  - What You Need to Know395
- The RIP Screen396
- The OSPF Screen397
- Routing Protocol Technical Reference406
Chapter 17 Zones409
- Zones Overview409
  - What You Can Do in this Chapter409
  - What You Need to Know410
- The Zone Screen411
- Zone Edit412
- Ddns413
Chapter 18 DDNS413
- DDNS Overview413
  - What You Can Do in this Chapter413
  - What You Need to Know413
- The DDNS Screen414
  - The Dynamic DNS Add/Edit Screen416
- Nat419
Chapter 19 NAT419
- NAT Overview419
  - What You Can Do in this Chapter419
  - What You Need to Know420
- The NAT Screen420
  - The NAT Add/Edit Screen422
  - NAT Technical Reference425
Chapter 20 HTTP Redirect429
- Overview429
- Alg433
Chapter 21 ALG433
- ALG Overview433
Chapter 22 IP/MAC Binding441
- IP/MAC Binding Overview441
Chapter 23 Authentication Policy447
- Overview447
Edit449
- Adding Exceptional Services450
- Creating/Editing an Authentication Policy451
- Firewall455
Chapter 24 Firewall455
- Overview455
- The Firewall Screen463
  - Configuring the Firewall Screen464
  - The Firewall Add/Edit Screen467
- The Session Limit Screen468
  - The Session Limit Add/Edit Screen470
Chapter 25 Ipsec VPN473
- Ipsec VPN Overview473
- The VPN Connection Screen476
  - The VPN Connection Add/Edit (IKE) Screen478
  - The VPN Connection Add/Edit Manual Key Screen485
- The VPN Gateway Screen488
  - The VPN Gateway Add/Edit Screen489
- VPN Concentrator497
- Ipsec VPN Background Information501
  - Ike Sa Overview502
  - Ipsec Sa Overview508
- Ssl Vpn513
- Overview513
  - What You Can Do in this Chapter513
  - What You Need to Know513
Chapter 26 SSL VPN513
- The SSL Access Privilege Screen516
  - Access Policy516
  - The SSL Access Policy Add/Edit Screen518
- The SSL Global Setting Screen521
Ssl Vpn521
- How to Upload a Custom Logo522
- Establishing an SSL VPN Connection523
Chapter 27 SSL User Screens525
- Overview525
  - What You Need to Know525
- Remote User Login526
- The SSL VPN User Screens531
- Bookmarking the Zywall532
- Logging out of the SSL VPN User Screens532
Chapter 28 SSL User Application Screens535
- SSL User Application Screens Overview535
- The Application Screen535
Chapter 29 SSL User File Sharing537
- Overview537
  - What You Need to Know537
- The Main File Sharing Screen538
- Opening a File or Folder538
  - Downloading a File540
  - Saving a File541
- Creating a New Folder541
- Renaming a File or Folder542
- Deleting a File or Folder542
- Uploading a File543
Chapter 30 Zywall Secuextender545
- The Zywall Secuextender Icon545
- Statistics546
- View Log547
- Suspend and Resume the Connection547
- Stop the Connection548
- Uninstalling the Zywall Secuextender548
Chapter 31 L2TP VPN549
- Overview549
  - What You Can Do in this Chapter549
  - What You Need to Know549
- L2TP VPN Screen551
Chapter 32 Application Patrol553
- Overview553
Chapter 33 Anti-Virus579
- Overview579
Chapter 34 IDP595
- Overview595
Chapter 35 ADP629
- ADP and IDP Comparison629
- What You Can Do in this Chapter629
- What You Need to Know629
- Before You Begin630
- The ADP General Screen631
- The Profile Summary Screen632
Chapter 36 Content Filtering649
- Overview649
Chapter 37 Content Filter Reports675
- Overview675
- Viewing Content Filter Reports675
- Anti-Spam683
Chapter 38 Anti-Spam683
- Overview683
- Before You Begin685
- The Anti-Spam General Screen685
  - The Anti-Spam Policy Add or Edit Screen687
- The Anti-Spam Black List Screen689
  - The Anti-Spam Black or White List Add/Edit Screen691
  - Regular Expressions in Black or White List Entries692
- The Anti-Spam White List Screen693
- The DNSBL Screen694
- Anti-Spam Technical Reference696
- Device HA701
Chapter 39 Device HA701
- Overview701
- Device HA General703
- The Active-Passive Mode Screen704
  - Configuring Active-Passive Mode Device HA706
- Configuring an Active-Passive Mode Monitored Interface709
- The Legacy Mode Screen711
- Configuring the Legacy Mode Screen712
- Device HA Technical Reference716
- User/Group723
Chapter 40 User/Group723
- Overview723
  - What You Can Do in this Chapter723
  - What You Need to Know723
- User Summary Screen726
  - User Add/Edit Screen726
- User Group Summary Screen729
  - Group Add/Edit Screen730
- Setting Screen731
  - Default User Authentication Timeout Settings Edit Screens734
  - User Aware Login Example736
- User /Group Technical Reference737
  - Addresses739
Chapter 41 Addresses739
- Overview739
  - What You Can Do in this Chapter739
  - What You Need to Know739
- Address Summary Screen739
  - Address Add/Edit Screen741
- Address Group Summary Screen742
  - Address Group Add/Edit Screen743
- Services745
Chapter 42 Services745
- Overview745
  - What You Can Do in this Chapter745
  - What You Need to Know745
- The Service Summary Screen746
  - The Service Add/Edit Screen748
- The Service Group Summary Screen748
  - The Service Group Add/Edit Screen750
- Schedules751
Chapter 43 Schedules751
- Overview751
  - What You Can Do in this Chapter751
  - What You Need to Know751
- The Schedule Summary Screen752
Chapter 44 AAA Server757
- Overview757
- Active Directory or LDAP Server Summary761
  - Adding an Active Directory or LDAP Server761
- RADIUS Server Summary763
  - Adding a RADIUS Server765
Chapter 45 Authentication Method767
- Overview767
- Authentication Method Objects768
  - Creating an Authentication Method Object769
- Certificates773
Chapter 46 Certificates773
- Overview773
- The My Certificates Screen777
- The Trusted Certificates Screen787
  - The Trusted Certificates Edit Screen788
  - The Trusted Certificates Import Screen792
- Certificates Technical Reference793
- ISP Accounts795
Chapter 47 ISP Accounts795
- Overview795
  - What You Can Do in this Chapter795
- ISP Account Summary795
  - ISP Account Edit796
  - Stac Compression798
- SSL Application799
Chapter 48 SSL Application799
- Overview799
- The SSL Application Screen801
  - Creating/Editing a Web-Based SSL Application Object802
  - Creating/Editing a File Sharing SSL Application Object804
- Endpoint Security807
Chapter 49 Endpoint Security807
- Overview807
  - What You Can Do in this Chapter808
  - What You Need to Know808
- Endpoint Security Screen809
- Endpoint Security Add/Edit810
Chapter 50 System815
- Overview815
  - What You Can Do in this Chapter815
- Host Name816
System Name816
- USB Storage817
- Date and Time818
  - Pre-Defined NTP Time Servers List820
  - Time Server Synchronization821
- Console Port Speed822
- DNS Overview822
- WWW Overview830
- Ssh847
- Telnet852
  - Configuring Telnet853
- Ftp854
  - Configuring FTP854
- Snmp856
Chapter 51 Log and Report867
- Overview867
  - What You Can Do in this Chapter867
- Email Daily Report867
- Log Setting Screens869
Chapter 52 File Manager887
- Overview887
- The Configuration File Screen890
- The Firmware Package Screen894
- The Shell Script Screen896
  - Diagnostics899
Chapter 53 Diagnostics899
- Overview899
  - What You Can Do in this Chapter899
- The Diagnostic Screen899
  - The Diagnostics Files Screen900
- The Packet Capture Screen901
  - The Packet Capture Files Screen904
  - Example of Viewing a Packet Capture File905
- Core Dump Screen906
  - Core Dump Files Screen906
- The System Log Screen907
- Packet Flow Explore909
Chapter 54 Packet Flow Explore909
- Overview909
  - What You Can Do in this Chapter909
- The Routing Status Screen909
- The SNAT Status Screen913
- Reboot917
Chapter 55 Reboot917
- Overview917
  - What You Need to Know917
- The Reboot Screen917
- Shutdown919
Chapter 56 Shutdown919
- Overview919
  - What You Need to Know919
- The Shutdown Screen919
- Troubleshooting921
Chapter 57 Troubleshooting921
- Troubleshooting922
- Resetting the Zywall939
- System-Default.conf939
- Getting more Troubleshooting Help940
Chapter 58 Product Specifications941
- Static Routes942
- PCMCIA Card Installation947
Appendix A Log Descriptions949
Appendix B Common Services1015
Protocol1015
Syslog1017
Appendix C Displaying Anti-Virus Alert Messages in Windows1019
Appendix D Importing Certificates1025
Appendix D Importing Certificates1026
Appendix E Wireless Lans1051
- Wireless Lan Topologies1051
- Fragmentation Threshold1055
- Preamble Type1055
- Wireless Security Overview1056
- Dynamic Wep Key Exchange1059
- Security Parameters Summary1064
- Antenna Characteristics1065
- Types of Antennas for Wlan1065
- Positioning Antennas1066
Appendix F Open Software Announcements1067
Appendix G Legal Information1125
Appendix G Legal Information1126
- Zyxel Limited Warranty1127
Index1129
- SSL Policy1136
- And OSPF1137
And RIP1137
- And ALG1137
- Statistics1139
Types1140
- Static DHCP1140
Metric1140
- Bandwidth1140
- Anti-Virus1151
- Application Patrol1151
Idp1151
- Traffic1151

ZyXEL Communications ZyWALL USG 300 - Page 7

Table of Contents

Other manuals for ZyXEL Communications ZyWALL USG 300

Related product manuals