User Guide
Page 3
... the real time online help provides. • Read Chapter 5 on page 69 if you're using the quick setup wizards and you want to configure the ZyWALL using the Web Configurator. Related Documentation • Quick Start Guide The Quick Start Guide is designed to show you...recommended you read Chapter 7 on page 107 for ZyWALL application examples. • Subsequent chapters are needed to configure a feature and how to use the Command-Line Interface (CLI) to configure the ZyWALL. ZyWALL USG 20/20W User's Guide 3 E-mail techwriters@zyxel.com.tw if you cannot find specific information in...
... the real time online help provides. • Read Chapter 5 on page 69 if you're using the quick setup wizards and you want to configure the ZyWALL using the Web Configurator. Related Documentation • Quick Start Guide The Quick Start Guide is designed to show you...recommended you read Chapter 7 on page 107 for ZyWALL application examples. • Subsequent chapters are needed to configure a feature and how to use the Command-Line Interface (CLI) to configure the ZyWALL. ZyWALL USG 20/20W User's Guide 3 E-mail techwriters@zyxel.com.tw if you cannot find specific information in...
User Guide
Page 9
Contents Overview Contents Overview User's Guide ...27 Introducing the ZyWALL ...29 Features and Applications ...37 Web Configurator ...43 Installation Setup Wizard ...59 Quick Setup ...69 Configuration Basics ...87 Tutorials ...107 Technical Reference ...163 Dashboard ...165 Monitor ...177 ...SSL VPN ...427 SSL User Screens ...437 SSL User Application Screens 447 ZyWALL SecuExtender ...449 Bandwidth Management ...453 ADP ...467 Content Filtering ...487 Content Filter Reports ...513 Anti-Spam ...521 User/Group ...539 Addresses ...555 Services ...561 ZyWALL USG 20/20W User's Guide 9
Contents Overview Contents Overview User's Guide ...27 Introducing the ZyWALL ...29 Features and Applications ...37 Web Configurator ...43 Installation Setup Wizard ...59 Quick Setup ...69 Configuration Basics ...87 Tutorials ...107 Technical Reference ...163 Dashboard ...165 Monitor ...177 ...SSL VPN ...427 SSL User Screens ...437 SSL User Application Screens 447 ZyWALL SecuExtender ...449 Bandwidth Management ...453 ADP ...467 Content Filtering ...487 Content Filter Reports ...513 Anti-Spam ...521 User/Group ...539 Addresses ...555 Services ...561 ZyWALL USG 20/20W User's Guide 9
User Guide
Page 12
... Checking Flow 94 6.5 Feature Configuration Overview 95 12 ZyWALL USG 20/20W User's Guide Finish 80 5.5.4 VPN Advanced Wizard - Table of Contents Chapter 4 Installation Setup Wizard ...59 4.1 Installation Setup Wizard Screens 59 4.1.1 Internet Access Setup - Finish 65 4.2 Device Registration ...65 Chapter 5 Quick Setup ...69 5.1 Quick Setup Overview ...69 5.2 WAN Interface Quick Setup 70 5.2.1 Choose an Ethernet Interface 70 5.2.2 Select...
... Checking Flow 94 6.5 Feature Configuration Overview 95 12 ZyWALL USG 20/20W User's Guide Finish 80 5.5.4 VPN Advanced Wizard - Table of Contents Chapter 4 Installation Setup Wizard ...59 4.1 Installation Setup Wizard Screens 59 4.1.1 Internet Access Setup - Finish 65 4.2 Device Registration ...65 Chapter 5 Quick Setup ...69 5.1 Quick Setup Overview ...69 5.2 WAN Interface Quick Setup 70 5.2.1 Choose an Ethernet Interface 70 5.2.2 Select...
User Guide
Page 14
... Rule 138 7.11 How to Use an IPPBX on the DMZ 139 7.11.1 Turn On the ALG ...141 7.11.2 Create the Address Objects 141 7.11.3 Setup a NAT Policy for the IPPBX 142 7.11.4 Set Up a WAN to DMZ Firewall Rule for SIP 143 7.11.5 Set Up a DMZ to LAN Firewall Rule... 8.1 Overview ...165 8.1.1 What You Can Do in this Chapter 165 8.2 The Dashboard Screen ...165 8.2.1 The CPU Usage Screen 171 8.2.2 The Memory Usage Screen 172 14 ZyWALL USG 20/20W User's Guide
... Rule 138 7.11 How to Use an IPPBX on the DMZ 139 7.11.1 Turn On the ALG ...141 7.11.2 Create the Address Objects 141 7.11.3 Setup a NAT Policy for the IPPBX 142 7.11.4 Set Up a WAN to DMZ Firewall Rule for SIP 143 7.11.5 Set Up a DMZ to LAN Firewall Rule... 8.1 Overview ...165 8.1.1 What You Can Do in this Chapter 165 8.2 The Dashboard Screen ...165 8.2.1 The CPU Usage Screen 171 8.2.2 The Memory Usage Screen 172 14 ZyWALL USG 20/20W User's Guide
User Guide
Page 33
... disabled on this port. You can use text-based commands to configure the ZyWALL. Web Configurator The Web Configurator allows easy ZyWALL setup and management using remote management (for example, SSH or Telnet) or via the ZyWALL USG 20/20W User's Guide 33 Orange Off There is enabled on this port. This User's Guide provides information...
... disabled on this port. You can use text-based commands to configure the ZyWALL. Web Configurator The Web Configurator allows easy ZyWALL setup and management using remote management (for example, SSH or Telnet) or via the ZyWALL USG 20/20W User's Guide 33 Orange Off There is enabled on this port. This User's Guide provides information...
User Guide
Page 43
ZyWALL USG 20/20W User's Guide 43 See the Quick Start Guide. CHAPTER 3 Web Configurator The ZyWALL Web Configurator allows easy ZyWALL setup and management using an Internet browser. 3.1 Web Configurator Requirements In order to use the Web Configurator, you must • Use Internet Explorer 7 or later, or ... default) • Enable Java permissions (enabled by default) • Enable cookies The recommended screen resolution is 1024 x 768 pixels. 3.2 Web Configurator Access 1 Make sure your ZyWALL hardware is properly connected.
ZyWALL USG 20/20W User's Guide 43 See the Quick Start Guide. CHAPTER 3 Web Configurator The ZyWALL Web Configurator allows easy ZyWALL setup and management using an Internet browser. 3.1 Web Configurator Requirements In order to use the Web Configurator, you must • Use Internet Explorer 7 or later, or ... default) • Enable Java permissions (enabled by default) • Enable cookies The recommended screen resolution is 1024 x 768 pixels. 3.2 Web Configurator Access 1 Make sure your ZyWALL hardware is properly connected.
User Guide
Page 45
If you click Ignore, the Installation Setup Wizard opens if the ZyWALL is divided into these parts (as shown next. otherwise the dashboard appears as illustrated in this screen does not appear anymore. If you change the..., the Login screen (Figure 6 on page 44) appears after you change the password for the default user account, this screen. title bar • B - main window ZyWALL USG 20/20W User's Guide 45 If you click Apply. navigation panel • C - Figure 8 Dashboard B A C 3.3 Web Configurator Screens Overview The Web Configurator screen is using the ...
If you click Ignore, the Installation Setup Wizard opens if the ZyWALL is divided into these parts (as shown next. otherwise the dashboard appears as illustrated in this screen does not appear anymore. If you change the..., the Login screen (Figure 6 on page 44) appears after you change the password for the default user account, this screen. title bar • B - main window ZyWALL USG 20/20W User's Guide 45 If you click Apply. navigation panel • C - Figure 8 Dashboard B A C 3.3 Web Configurator Screens Overview The Web Configurator screen is using the ...
User Guide
Page 48
...FOLDER OR LINK TAB FUNCTION Quick Setup Quickly configure WAN interfaces or VPN connections. Traffic Statistics Collect and display traffic statistics. IP/MAC Binding Lists the devices that have received an IP address from ZyWALL interfaces using IP/MAC binding.... Configurator 3.3.2.2 Monitor Menu The monitor menu screens display status and statistics information. WLAN Status (For USG 20W only) Displays the connection status of the ZyWALL's wireless clients. You can also log out individual users and delete related session information. Service View...
...FOLDER OR LINK TAB FUNCTION Quick Setup Quickly configure WAN interfaces or VPN connections. Traffic Statistics Collect and display traffic statistics. IP/MAC Binding Lists the devices that have received an IP address from ZyWALL interfaces using IP/MAC binding.... Configurator 3.3.2.2 Monitor Menu The monitor menu screens display status and statistics information. WLAN Status (For USG 20W only) Displays the connection status of the ZyWALL's wireless clients. You can also log out individual users and delete related session information. Service View...
User Guide
Page 59
... subscription services. WAN Interface Use this User's Guide for Internet access. 4.1.1 Internet Access Setup - This wizard helps you log into the Web Configurator when the ZyWALL is using its default configuration, the first Installation Setup Wizard screen displays. ZyWALL USG 20/20W User's Guide 59 See the feature-specific chapters in the upper right corner to...
... subscription services. WAN Interface Use this User's Guide for Internet access. 4.1.1 Internet Access Setup - This wizard helps you log into the Web Configurator when the ZyWALL is using its default configuration, the first Installation Setup Wizard screen displays. ZyWALL USG 20/20W User's Guide 59 See the feature-specific chapters in the upper right corner to...
User Guide
Page 60
...if you are configuring for Internet access. • Zone: This is used as given to you don't have that will belong. 60 ZyWALL USG 20/20W User's Guide Figure 25 Internet Access: Ethernet Encapsulation • Encapsulation: This displays the type of the interface that information. Note: Enter ... screen to configure your ISP to know what to which this interface and Internet connection will connect with your ISP. Chapter 4 Installation Setup Wizard The screens vary depending on the encapsulation type. Refer to information provided by your ISP. • Zone: This is the ...
...if you are configuring for Internet access. • Zone: This is used as given to you don't have that will belong. 60 ZyWALL USG 20/20W User's Guide Figure 25 Internet Access: Ethernet Encapsulation • Encapsulation: This displays the type of the interface that information. Note: Enter ... screen to configure your ISP to know what to which this interface and Internet connection will connect with your ISP. Chapter 4 Installation Setup Wizard The screens vary depending on the encapsulation type. Refer to information provided by your ISP. • Zone: This is the ...
User Guide
Page 61
... IP address assignment. The DNS server is extremely important because without it . The ZyWALL uses these (in the previous screen. PPPoE uses a service name to resolve domain names for VPN, DDNS and the time server. Options are: ZyWALL USG 20/20W User's Guide 61 Chapter 4 Installation Setup Wizard • IP Address: Enter your service provider.
... IP address assignment. The DNS server is extremely important because without it . The ZyWALL uses these (in the previous screen. PPPoE uses a service name to resolve domain names for VPN, DDNS and the time server. Options are: ZyWALL USG 20/20W User's Guide 61 Chapter 4 Installation Setup Wizard • IP Address: Enter your service provider.
User Guide
Page 62
... fields display if you do not want the connection to which this interface and Internet connection will connect with the user name. Your ZyWALL accepts CHAP only. • PAP - Enter a DNS server's IP address(es). The DNS server is the security zone to time out. Your... PAP only. • MSCHAP - If you by the remote node. • CHAP - Chapter 4 Installation Setup Wizard • CHAP/PAP - This field can access it . 62 ZyWALL USG 20/20W User's Guide Your ZyWALL accepts MSCHAP-V2 only. • Type the User Name given to you do not want to access it . Otherwise, type...
... fields display if you do not want the connection to which this interface and Internet connection will connect with the user name. Your ZyWALL accepts CHAP only. • PAP - Enter a DNS server's IP address(es). The DNS server is the security zone to time out. Your... PAP only. • MSCHAP - If you by the remote node. • CHAP - Chapter 4 Installation Setup Wizard • CHAP/PAP - This field can access it . 62 ZyWALL USG 20/20W User's Guide Your ZyWALL accepts MSCHAP-V2 only. • Type the User Name given to you do not want to access it . Otherwise, type...
User Guide
Page 63
...characters, and it . Use up to 31 characters long. • Type the Password associated with the user name. Your ZyWALL accepts CHAP only. • PAP - Your ZyWALL accepts MSCHAP-V2 only. • Type the User Name given to you by your ISP. Select an authentication protocol for outgoing... by your password in the next field to confirm it can be up to 64 ASCII characters except the [] and ?. ZyWALL USG 20/20W User's Guide 63 Chapter 4 Installation Setup Wizard 4.1.4 Internet Access: PPTP Note: Enter the Internet access information exactly as given to you by the remote node. •...
...characters, and it . Use up to 31 characters long. • Type the Password associated with the user name. Your ZyWALL accepts CHAP only. • PAP - Your ZyWALL accepts MSCHAP-V2 only. • Type the User Name given to you by your ISP. Select an authentication protocol for outgoing... by your password in the next field to confirm it can be up to 64 ASCII characters except the [] and ?. ZyWALL USG 20/20W User's Guide 63 Chapter 4 Installation Setup Wizard 4.1.4 Internet Access: PPTP Note: Enter the Internet access information exactly as given to you by the remote node. •...
User Guide
Page 64
...; Type a Connection ID or connection name. Auto displays if you selected Auto as 0.0.0.0 if you do not want to configure DNS servers. 64 ZyWALL USG 20/20W User's Guide The DNS server is the security zone to which this interface and Internet connection will belong. • IP Address: Enter your ISP....) assigned to you by your ISP. • Type the IP Subnet Mask assigned to you by your broadband modem or router. The ZyWALL uses these (in the previous screen. • First / Second DNS Server: These fields display if you selected static IP address assignment. Chapter 4 Installation...
...; Type a Connection ID or connection name. Auto displays if you selected Auto as 0.0.0.0 if you do not want to configure DNS servers. 64 ZyWALL USG 20/20W User's Guide The DNS server is the security zone to which this interface and Internet connection will belong. • IP Address: Enter your ISP....) assigned to you by your ISP. • Type the IP Subnet Mask assigned to you by your broadband modem or router. The ZyWALL uses these (in the previous screen. • First / Second DNS Server: These fields display if you selected static IP address assignment. Chapter 4 Installation...
User Guide
Page 65
Chapter 4 Installation Setup Wizard 4.1.6 Internet Access - If they are activated (if any un-activated trial services. Alternatively, close the window to exit the wizard. 4.2 Device Registration Use this ... security features if you have not already done so, you can still activate any ). You can register your ZyWALL with your ZyWALL with myZXEL.com and activate trial periods of services like Content Filter. ZyWALL USG 20/20W User's Guide 65 Figure 28 Internet Access: Ethernet Encapsulation Note: If you want to do a more detailed...
Chapter 4 Installation Setup Wizard 4.1.6 Internet Access - If they are activated (if any un-activated trial services. Alternatively, close the window to exit the wizard. 4.2 Device Registration Use this ... security features if you have not already done so, you can still activate any ). You can register your ZyWALL with your ZyWALL with myZXEL.com and activate trial periods of services like Content Filter. ZyWALL USG 20/20W User's Guide 65 Figure 28 Internet Access: Ethernet Encapsulation Note: If you want to do a more detailed...
User Guide
Page 66
...spaces. • Country Code: Select your service subscription status. Spaces are not allowed. Use from the drop-down box list. 66 ZyWALL USG 20/20W User's Guide Type it is available. • Password: Use six to 20 alphanumeric characters (and the underscore). Click Check to verify...it again in the fields below to 20 alphanumeric characters (and the underscore). Chapter 4 Installation Setup Wizard Use the Registration > Service screen to update your country from six to register your ZyWALL. • Enter a User Name for your e-mail address. Figure 29 Registration •...
...spaces. • Country Code: Select your service subscription status. Spaces are not allowed. Use from the drop-down box list. 66 ZyWALL USG 20/20W User's Guide Type it is available. • Password: Use six to 20 alphanumeric characters (and the underscore). Click Check to verify...it again in the fields below to 20 alphanumeric characters (and the underscore). Chapter 4 Installation Setup Wizard Use the Registration > Service screen to update your country from six to register your ZyWALL. • Enter a User Name for your e-mail address. Figure 29 Registration •...
User Guide
Page 67
The trial period starts the day you can try a trial service subscription. Figure 30 Registraton: Registered Device ZyWALL USG 20/20W User's Guide 67 After the trial expires, you activate the trial. Chapter 4 Installation Setup Wizard • Trial Service Activation: You can buy an iCard and enter the license key in the Registration > Service screen to extend the service.
The trial period starts the day you can try a trial service subscription. Figure 30 Registraton: Registered Device ZyWALL USG 20/20W User's Guide 67 After the trial expires, you activate the trial. Chapter 4 Installation Setup Wizard • Trial Service Activation: You can buy an iCard and enter the license key in the Registration > Service screen to extend the service.
User Guide
Page 69
...ZyWALL USG 20/20W User's Guide 69 See Section 5.2 on page 76. See Section 5.4 on page 70. • VPN SETUP Use VPN SETUP to configure a VPN (Virtual Private Network) tunnel for background information. In the Web Configurator, click Configuration > Quick Setup to open a wizard to open the first Quick Setup.... This chapter provides information on configuring the quick setup screens in the ZyWALL if you configure Internet and VPN connection settings. CHAPTER 5 Quick Setup 5.1 Quick Setup Overview The Web Configurator's quick setup wizards help you use PPPoE or PPTP. This ...
...ZyWALL USG 20/20W User's Guide 69 See Section 5.2 on page 76. See Section 5.4 on page 70. • VPN SETUP Use VPN SETUP to configure a VPN (Virtual Private Network) tunnel for background information. In the Web Configurator, click Configuration > Quick Setup to open a wizard to open the first Quick Setup.... This chapter provides information on configuring the quick setup screens in the ZyWALL if you configure Internet and VPN connection settings. CHAPTER 5 Quick Setup 5.1 Quick Setup Overview The Web Configurator's quick setup wizards help you use PPPoE or PPTP. This ...
User Guide
Page 70
Click Next. Chapter 5 Quick Setup 5.2 WAN Interface Quick Setup Click WAN Interface in the main Quick Setup screen to the internet. Use these screens to configure an interface to connect to open the WAN Interface Quick Setup Wizard Welcome screen. Figure 33 Choose an Ethernet Interface 5.2.2...Type WAN Type Selection: Select the type of encapsulation this connection is used as a regular Ethernet. 70 ZyWALL USG 20/20W User's Guide Figure 32 WAN Interface Quick Setup Wizard 5.2.1 Choose an Ethernet Interface Select the Ethernet interface that you want to use. Choose Ethernet when ...
Click Next. Chapter 5 Quick Setup 5.2 WAN Interface Quick Setup Click WAN Interface in the main Quick Setup screen to the internet. Use these screens to configure an interface to connect to open the WAN Interface Quick Setup Wizard Welcome screen. Figure 33 Choose an Ethernet Interface 5.2.2...Type WAN Type Selection: Select the type of encapsulation this connection is used as a regular Ethernet. 70 ZyWALL USG 20/20W User's Guide Figure 32 WAN Interface Quick Setup Wizard 5.2.1 Choose an Ethernet Interface Select the Ethernet interface that you want to use. Choose Ethernet when ...