ZyXEL Communications ZyWall USG20-VPN

To Next Page

To Previous Page

Chapter 20 Security Policy

USG20(W)-VPN Series User’s Guide

316

Note: Note that the walkthroughs do not perform the actual configuring, but just show

you how to do it.

This is an example of a port forwarding configuration walkthrough.

Figure 211 Example of a Port Forwarding Configuration Walkthrough.

This is an example of L2TP over IPSec VPN Troubleshooting troubleshooting.

Main Page

Default Chapter3
- Table of Contents3
PART I User's Guide17
Chapter 1 Introduction19
- Overview19
  - Applications19
- Management Overview21
- Web Configurator23
Chapter 2 Installation Setup Wizard37
- Installation Setup Wizard Screens37
Chapter 3 Hardware, Interfaces and Zones45
- Hardware Overview45
- Default Zones, Interfaces, and Ports48
- Stopping the USG49
Chapter 4 Quick Setup Wizards50
- Quick Setup Overview50
- WAN Interface Quick Setup51
- VPN Setup Wizard56
- VPN Settings for Configuration Provisioning Wizard: Wizard Type67
- VPN Settings for L2TP VPN Settings Wizard78
Chapter 5 Dashboard83
- Overview83
  - What You Can Do in this Chapter83
- Main Dashboard Screen83
Part II: Technical Reference99
Chapter 6 Monitor101
- Overview101
  - What You Can Do in this Chapter101
- The Port Statistics Screen102
  - The Port Statistics Graph Screen103
- Interface Status Screen104
- The Traffic Statistics Screen106
- The Session Monitor Screen109
- IGMP Statistics110
- The DDNS Status Screen111
- IP/MAC Binding112
- The Login Users Screen112
- Cellular Status Screen113
- The Upnp Port Status Screen115
- USB Storage Screen116
- Ethernet Neighbor Screen117
- Wireless118
  - Wireless AP Information: Radio List118
  - Radio List more Information120
  - Wireless Station Info121
  - Detected Device122
- The Ipsec Monitor Screen123
  - Regular Expressions in Searching Ipsec Sas124
- The SSL Screen124
- The L2TP over Ipsec Session Monitor Screen125
- The Content Filter Screen126
- The Anti-Spam Screens128
  - Anti-Spam Report128
  - The Anti-Spam Status Screen130
- Log Screens131
  - View Log131
Chapter 7 Licensing134
- Registration Overview134
Chapter 8 Wireless137
- Overview137
  - What You Can Do in this Chapter137
  - What You Need to Know137
- AP Management Screen138
- DCS Screen139
- Technical Reference139
  - Dynamic Channel Selection139
- Interfaces141
  - Interface Overview141
    - What You Can Do in this Chapter141
Chapter 9 Interfaces141
- What You Need to Know142
- What You Need to Do First146
- Port Role Screen146
- Ethernet Summary Screen147
- PPP Interfaces167
  - PPP Interface Summary168
  - PPP Interface Add or Edit169
- Cellular Configuration Screen174
  - Cellular Choose Slot177
  - Add / Edit Cellular Configuration177
- Tunnel Interfaces183
  - Configuring a Tunnel185
  - Tunnel Add or Edit Screen186
- VLAN Interfaces189
  - VLAN Summary Screen191
  - VLAN Add/Edit193
- Bridge Interfaces202
  - Bridge Summary204
  - Bridge Add/Edit205
- Virtual Interfaces214
  - Virtual Interfaces Add/Edit214
- Interface Technical Reference216
- Trunk Overview219
  - What You Need to Know219
- The Trunk Summary Screen222
  - Configuring a User-Defined Trunk223
  - Configuring the System Default Trunk225
- Routing227
  - Policy and Static Routes Overview227
    - What You Can Do in this Chapter227
Chapter 10 Routing227
- What You Need to Know228
- Policy Route Screen229
  - Policy Route Edit Screen231
- IP Static Route Screen236
  - Static Route Add/Edit Screen236
- Policy Routing Technical Reference238
- Routing Protocols Overview239
  - What You Need to Know239
- The RIP Screen239
- The OSPF Screen241
- Routing Protocol Technical Reference248
Chapter 11 DDNS250
- DDNS Overview250
  - What You Can Do in this Chapter250
  - What You Need to Know250
- The DDNS Screen251
  - The Dynamic DNS Add/Edit Screen252
- Nat256
  - NAT Overview256
    - What You Can Do in this Chapter256
    - What You Need to Know256
  - The NAT Screen256
Chapter 12 NAT256
- The NAT Add/Edit Screen258
- NAT Technical Reference261
- HTTP Redirect263
  - Overview263
    - What You Can Do in this Chapter263
    - What You Need to Know263
Chapter 13 HTTP Redirect263
- The HTTP Redirect Screen264
  - The HTTP Redirect Edit Screen265
- Alg267
  - ALG Overview267
    - What You Need to Know267
Chapter 14 ALG267
- Sip Alg268
- Before You Begin270
- The ALG Screen270
- ALG Technical Reference272
- Upnp274
  - Upnp and NAT-PMP Overview274
  - What You Need to Know274
    - NAT Traversal274
Chapter 15 Upnp274
- Cautions with Upnp and NAT-PMP275
- Upnp Screen275
- Technical Reference276
- IP/MAC Binding283
  - IP/MAC Binding Overview283
    - What You Can Do in this Chapter283
    - What You Need to Know283
Chapter 16 IP/MAC Binding283
- IP/MAC Binding Summary284
  - IP/MAC Binding Edit284
  - Static DHCP Edit285
- IP/MAC Binding Exempt List286
- Layer 2 Isolation288
  - Overview288
    - What You Can Do in this Chapter288
Chapter 17 Layer 2 Isolation288
- Layer-2 Isolation General Screen289
- White List Screen289
  - Add/Edit White List Rule290
Chapter 18 Inbound Load Balancing292
- Inbound Load Balancing Overview292
  - What You Can Do in this Chapter292
- The Inbound LB Screen293
  - The Inbound LB Add/Edit Screen294
  - The Inbound LB Member Add/Edit Screen296
Chapter 19 Web Authentication298
- Web Auth Overview298
  - What You Can Do in this Chapter298
  - What You Need to Know299
- Web Authentication Screen299
  - Creating Exceptional Services302
  - Creating/Editing an Authentication Policy302
- SSO Overview303
- SSO - USG Configuration305
- SSO Agent Configuration311
Chapter 20 Security Policy315
- Overview315
- One Security315
- What You Can Do in this Chapter319
  - What You Need to Know319
- The Security Policy Screen321
  - Configuring the Security Policy Control Screen322
  - The Security Policy Control Add/Edit Screen325
- The Session Control Screen327
  - The Session Control Add/Edit Screen329
- Security Policy Example Applications330
Chapter 21 Ipsec VPN333
- Virtual Private Networks (VPN) Overview333
- The VPN Connection Screen338
  - The VPN Connection Add/Edit (IKE) Screen339
- The VPN Gateway Screen345
  - The VPN Gateway Add/Edit Screen347
- VPN Concentrator354
- USG Ipsec VPN Client Configuration Provisioning356
- Ipsec VPN Background Information358
- Ssl Vpn368
  - Overview368
    - What You Can Do in this Chapter368
    - What You Need to Know368
Chapter 22 SSL VPN368
- The SSL Access Privilege Screen369
  - The SSL Access Privilege Policy Add/Edit Screen370
- The SSL Global Setting Screen373
  - How to Upload a Custom Logo374
- USG Secuextender375
  - Example: Configure USG for Secuextender376
Chapter 23 SSL User Screens379
- Overview379
  - What You Need to Know379
- Remote SSL User Login380
- The SSL VPN User Screens383
- Bookmarking the USG384
- Logging out of the SSL VPN User Screens385
- SSL User Application Screen385
- SSL User File Sharing386
Chapter 24 USG Secuextender (Windows)392
- The USG Secuextender Icon392
- Status392
- View Log393
- Suspend and Resume the Connection394
- Stop the Connection394
- Uninstalling the USG Secuextender394
- L2Tp Vpn396
  - Overview396
    - What You Can Do in this Chapter396
    - What You Need to Know396
Chapter 25 L2TP VPN396
- L2TP VPN Screen397
  - Example: L2TP and USG Behind a NAT Router399
Chapter 26 BWM (Bandwidth Management)401
- Overview401
  - What You Can Do in this Chapter401
  - What You Need to Know401
- The Bandwidth Management Screen405
  - The Bandwidth Management Add/Edit Screen407
Chapter 27 Content Filtering416
- Overview416
- Content Filter Profile Screen418
- Content Filter Profile Add or Edit Screen420
  - Content Filter Add Profile Category Service421
  - Content Filter Add Filter Profile Custom Service428
- Content Filter Trusted Web Sites Screen431
- Content Filter Forbidden Web Sites Screen432
- Content Filter Technical Reference433
- Anti-Spam435
  - Overview435
    - What You Can Do in this Chapter435
    - What You Need to Know435
Chapter 28 Anti-Spam435
- Before You Begin436
- The Anti-Spam Profile Screen437
  - The Anti-Spam Profile Add or Edit Screen438
- The Mail Scan Screen440
- The Anti-Spam Black List Screen442
  - The Anti-Spam Black or White List Add/Edit Screen444
  - Regular Expressions in Black or White List Entries445
- The Anti-Spam White List Screen445
- The DNSBL Screen447
- Anti-Spam Technical Reference449
- Object453
  - Zones Overview453
    - What You Need to Know453
Chapter 29 Object453
- The Zone Screen454
- User/Group Overview455
- AP Profile Overview469
  - Radio Screen470
  - SSID Screen476
- MON Profile485
  - Overview485
- Address Overview488
- Service Overview492
- Schedule Overview497
- AAA Server Overview502
- Auth. Method Overview511
- Certificate Overview514
- ISP Account Overview529
  - ISP Account Summary529
  - Isp Account Edit530
- SSL Application Overview532
  - What You Need to Know532
  - The SSL Application Screen534
Chapter 30 System538
- Overview538
  - What You Can Do in this Chapter538
- Host Name539
- USB Storage539
- Date and Time540
  - Pre-Defined NTP Time Servers List543
  - Time Server Synchronization543
- Console Port Speed544
- DNS Overview545
- WWW Overview554
- Ssh570
- Telnet574
  - Configuring Telnet574
- Ftp576
  - Configuring FTP576
- Snmp577
- Authentication Server581
  - Add/Edit Trusted RADIUS Client582
- Cloudcnm Screen583
- Language Screen586
- Ipv6 Screen586
- Zyxel One Network (ZON) Utility587
  - Zyxel One Network (ZON) System Screen588
Chapter 31 Log and Report590
- Overview590
  - What You Can Do in this Chapter590
- Email Daily Report590
- Log Setting Screens592
Chapter 32 File Manager605
- Overview605
- The Configuration File Screen607
- The Firmware Package Screen611
- The Shell Script Screen613
- Diagnostics616
  - Overview616
    - What You Can Do in this Chapter616
  - The Diagnostic Screen616
Chapter 33 Diagnostics616
- The Diagnostics Files Screen617
- The Packet Capture Screen618
  - The Packet Capture Files Screen621
- The Core Dump Screen621
  - The Core Dump Files Screen622
- The System Log Screen623
- The Network Tool Screen623
- The Wireless Frame Capture Screen624
  - The Wireless Frame Capture Files Screen626
Chapter 34 Packet Flow Explore628
- Overview628
  - What You Can Do in this Chapter628
- The Routing Status Screen628
- The SNAT Status Screen633
- Shutdown636
  - Overview636
    - What You Need to Know636
  - The Shutdown Screen636
Chapter 35 Shutdown636
Chapter 36 Troubleshooting637
- Resetting the USG645
- Getting more Troubleshooting Help646
Appendix A Customer Support647
Appendix B Legal Information653
- United States of America653
- Safety Warnings657
- Specifications660
- Zyxel Limited Warranty660
Appendix C Product Features662
Index666

ZyXEL Communications ZyWall USG20-VPN - Page 316

Table of Contents

Related product manuals