User Guide
Page 4
...Balancing 100 5.3 How to Use Multiple Static Public WAN IP Addresses for LAN-to-WAN Traffic 103 5.4 How to Configure DNS Inbound Load Balancing 104 5.5 How to Allow Public Access to a Web Server 106 5.6 How to Manage Voice Traffic ...108 5.7 How to Limit Web Surfing and MSN to Specific ...People 113 Maintenance ...119 6.1 How to Allow Management Service from WAN 119 6.2 How to Use a RADIUS Server to Authenticate User Accounts based on Groups 122 6.3 How to Use SSH for Secure Telnet Access 123 6.4 How to Manage ZyWALL Configuration Files 124 6.5 How ...
...Balancing 100 5.3 How to Use Multiple Static Public WAN IP Addresses for LAN-to-WAN Traffic 103 5.4 How to Configure DNS Inbound Load Balancing 104 5.5 How to Allow Public Access to a Web Server 106 5.6 How to Manage Voice Traffic ...108 5.7 How to Limit Web Surfing and MSN to Specific ...People 113 Maintenance ...119 6.1 How to Allow Management Service from WAN 119 6.2 How to Use a RADIUS Server to Authenticate User Accounts based on Groups 122 6.3 How to Use SSH for Secure Telnet Access 123 6.4 How to Manage ZyWALL Configuration Files 124 6.5 How ...
User Guide
Page 7
In either case, you can manage the ZyWALL in your model. Figure 5 Applications: User-Aware Access Control A B C Chapter 1 Introduction Load Balancing Set up multiple connections to interfaces may use "the WAN interface" rather than the specific name used in the following ways. Figure 7 ...6 Applications: Multiple WAN Interfaces 1.2 Default Zones, Interfaces, and Ports The default configurations for zones, interfaces, and ports are as follows. ZyWALL USG100-PLUS User's Guide 7 For example, this guide may be generic rather than "wan1" or "wan2". References to the Internet on...
In either case, you can manage the ZyWALL in your model. Figure 5 Applications: User-Aware Access Control A B C Chapter 1 Introduction Load Balancing Set up multiple connections to interfaces may use "the WAN interface" rather than the specific name used in the following ways. Figure 7 ...6 Applications: Multiple WAN Interfaces 1.2 Default Zones, Interfaces, and Ports The default configurations for zones, interfaces, and ports are as follows. ZyWALL USG100-PLUS User's Guide 7 For example, this guide may be generic rather than "wan1" or "wan2". References to the Internet on...
User Guide
Page 22
..., and Zone Configuration Example 2.2.1 Configure a WAN Ethernet Interface You need to assign the ZyWALL's wan1 interface a static IP address of 1.2.3.4. • Add P5 (lan2) to the DMZ interface. So you create a new zone and add WIZ_VPN to apply specific security settings for a protected local network. Chapter 2 How to Set Up Your Network... to be able to it. Select Use Fixed IP Address and configure the IP address, subnet mask, and default gateway settings and click OK. 22 ZyWALL USG100-PLUS User's Guide
..., and Zone Configuration Example 2.2.1 Configure a WAN Ethernet Interface You need to assign the ZyWALL's wan1 interface a static IP address of 1.2.3.4. • Add P5 (lan2) to the DMZ interface. So you create a new zone and add WIZ_VPN to apply specific security settings for a protected local network. Chapter 2 How to Set Up Your Network... to be able to it. Select Use Fixed IP Address and configure the IP address, subnet mask, and default gateway settings and click OK. 22 ZyWALL USG100-PLUS User's Guide
User Guide
Page 24
... sequence. 1 Make sure the 3G device's SIM card is highly recommended that you can configure firewall rules to apply specific security settings to this VPN zone. 2.3 How to one of the ZyWALL's USB ports. 3 Click Configuration > Network > Interface > Cellular. Select the 3G device's entry and click Edit.... WAN zone security settings to the Member box and click OK. See www.zyxel.com for cellular WAN (Internet) connections. Chapter 2 How to Set Up Your Network 3 Back to the Configuration > Network > Zone screen and click Add in this example). 24 ZyWALL USG100-PLUS User's Guide
... sequence. 1 Make sure the 3G device's SIM card is highly recommended that you can configure firewall rules to apply specific security settings to this VPN zone. 2.3 How to one of the ZyWALL's USB ports. 3 Click Configuration > Network > Interface > Cellular. Select the 3G device's entry and click Edit.... WAN zone security settings to the Member box and click OK. See www.zyxel.com for cellular WAN (Internet) connections. Chapter 2 How to Set Up Your Network 3 Back to the Configuration > Network > Zone screen and click Add in this example). 24 ZyWALL USG100-PLUS User's Guide
User Guide
Page 46
...the traffic comes before giving them access. 1 Set up user accounts in the service control rules. • The ZyWALL is not applying your firewall rules for specific users or groups of the authentication method setting. Method. When you create an interface, there is how to have the... ZyWALL use the local database to a user group will fail. Click Configuration > Object > AAA Server > RADIUS and double-click the ...
...the traffic comes before giving them access. 1 Set up user accounts in the service control rules. • The ZyWALL is not applying your firewall rules for specific users or groups of the authentication method setting. Method. When you create an interface, there is how to have the... ZyWALL use the local database to a user group will fail. Click Configuration > Object > AAA Server > RADIUS and double-click the ...
User Guide
Page 47
...Java (Java Runtime Environment or 'JRE') installed and enabled with authentication policies or SSL VPN to make sure users' computers meet specific security requirements before they are allowed to access the network. 1 Configure endpoint security objects (Configuration > Object > Endpoint Security ...> Add). 2 Configure an authentication policy to use multiple endpoint security objects the ZyWALL checks users' computers against the endpoint security objects in the list. 3.4 Device and Service Registration This tutorial shows you how to...
...Java (Java Runtime Environment or 'JRE') installed and enabled with authentication policies or SSL VPN to make sure users' computers meet specific security requirements before they are allowed to access the network. 1 Configure endpoint security objects (Configuration > Object > Endpoint Security ...> Add). 2 Configure an authentication policy to use multiple endpoint security objects the ZyWALL checks users' computers against the endpoint security objects in the list. 3.4 Device and Service Registration This tutorial shows you how to...
User Guide
Page 54
...Category Service and select desired actions for the different web page categories. Click Configuration > Anti-X > Content Filter > Filter Profile > Add to specific web sites or filter web content by checking against an external database. Chapter 3 Protecting Your Network 3.8 Content Filter Profile Configuration Content filter allows you... service. See Device and Service Registration on page 47. 1 You will first configure a content filter profile. Click Apply. 54 ZyWALL USG100-PLUS User's Guide Then select the categories to include in the profile or select Select All Categories.
...Category Service and select desired actions for the different web page categories. Click Configuration > Anti-X > Content Filter > Filter Profile > Add to specific web sites or filter web content by checking against an external database. Chapter 3 Protecting Your Network 3.8 Content Filter Profile Configuration Content filter allows you... service. See Device and Service Registration on page 47. 1 You will first configure a content filter profile. Click Apply. 54 ZyWALL USG100-PLUS User's Guide Then select the categories to include in the profile or select Select All Categories.
User Guide
Page 93
...for an application. You can set outbound and inbound guaranteed and maximum bandwidths for limited bandwidth. The ZyWALL applies bandwidth management before sending the packets out a WAN interface. • Inbound traffic comes back from the...Packet Directions LAN1 Connection Outbound BWM BWM Inbound • Outbound traffic goes from the interface it goes out through the ZyWALL. • How to Configure Bandwidth Management on page 93 • How to Configure a Trunk for WAN Load... on page 108 • How to Limit Web Surfing and MSN to Specific People on to the WAN.
...for an application. You can set outbound and inbound guaranteed and maximum bandwidths for limited bandwidth. The ZyWALL applies bandwidth management before sending the packets out a WAN interface. • Inbound traffic comes back from the...Packet Directions LAN1 Connection Outbound BWM BWM Inbound • Outbound traffic goes from the interface it goes out through the ZyWALL. • How to Configure Bandwidth Management on page 93 • How to Configure a Trunk for WAN Load... on page 108 • How to Limit Web Surfing and MSN to Specific People on to the WAN.
User Guide
Page 94
... and outbound packet flows. See the following : • SIP: Up to 10 simultaneous 100 Kbps calls guaranteed • Video conferencing: Up to 10 simultaneous 128 Kbps Skype video calls...calls is an example of allocating the any available bandwidth on the LAN or DMZ. 94 ZyWALL USG100-PLUS User's Guide Chapter 5 Managing Traffic 5.1.1 Bandwidth Allocation Example Say a 10-person... line and you want to allocate bandwidth for the following section if you prefer to configure specific bandwidth management rules for SIP Traffic. Enable Maximize Bandwidth Usage (Max B.U.) on a packet flow...
... and outbound packet flows. See the following : • SIP: Up to 10 simultaneous 100 Kbps calls guaranteed • Video conferencing: Up to 10 simultaneous 128 Kbps Skype video calls...calls is an example of allocating the any available bandwidth on the LAN or DMZ. 94 ZyWALL USG100-PLUS User's Guide Chapter 5 Managing Traffic 5.1.1 Bandwidth Allocation Example Say a 10-person... line and you want to allocate bandwidth for the following section if you prefer to configure specific bandwidth management rules for SIP Traffic. Enable Maximize Bandwidth Usage (Max B.U.) on a packet flow...
User Guide
Page 113
... except authorized user groups to enforce web surfing and MSN policies for the application patrol service. ZyWALL USG100-PLUS User's Guide 113 Click OK. Chapter 5 Managing Traffic 5.7 How to Limit Web Surfing and MSN to Specific People The following is not enabled, enable it, and click Apply. 2 Click Configuration > AppPatrol > Common and...
... except authorized user groups to enforce web surfing and MSN policies for the application patrol service. ZyWALL USG100-PLUS User's Guide 113 Click OK. Chapter 5 Managing Traffic 5.7 How to Limit Web Surfing and MSN to Specific People The following is not enabled, enable it, and click Apply. 2 Click Configuration > AppPatrol > Common and...
User Guide
Page 122
... RADIUS server authenticate groups of user accounts defined in the RADIUS server. it determines to radius. 122 ZyWALL USG100-PLUS User's Guide Set up one user account for each group of a specific attribute, you add ext-group-user user objects to ext-group-user. Enter a user name and ...set the Group Membership Attribute field to the attribute that the ZyWALL is called a group identifier; Double-click the radius entry. If...
... RADIUS server authenticate groups of user accounts defined in the RADIUS server. it determines to radius. 122 ZyWALL USG100-PLUS User's Guide Set up one user account for each group of a specific attribute, you add ext-group-user user objects to ext-group-user. Enter a user name and ...set the Group Membership Attribute field to the attribute that the ZyWALL is called a group identifier; Double-click the radius entry. If...
User Guide
Page 131
You have to evaluate when the best timing is enough). Select IPv4 in the Host IP field. ZyWALL USG100-PLUS User's Guide 131 Chapter 6 Maintenance 2 Go to Configuration > System > USB Storage, select Activate USB storage service and click Apply. 3 In the Maintenance > Diagnostics > ... User Defined and enter 172.16.1.33 in the IP Version field. Select Save data to a specific IP address (172.16.1.33) through the ZyWALL's LAN1 and WAN1. Click Apply. 6.9 How to Capture Packets on the ZyWALL This example traces the IPv4 packets (you can also capture IPv6 packets) sent from or to...
You have to evaluate when the best timing is enough). Select IPv4 in the Host IP field. ZyWALL USG100-PLUS User's Guide 131 Chapter 6 Maintenance 2 Go to Configuration > System > USB Storage, select Activate USB storage service and click Apply. 3 In the Maintenance > Diagnostics > ... User Defined and enter 172.16.1.33 in the IP Version field. Select Save data to a specific IP address (172.16.1.33) through the ZyWALL's LAN1 and WAN1. Click Apply. 6.9 How to Capture Packets on the ZyWALL This example traces the IPv4 packets (you can also capture IPv6 packets) sent from or to...
User Guide
Page 138
...city office, your product online to the purchaser. There is in material or workmanship for a specific period (the Warranty Period) from any implied warranty of electrical and electronic equipment. Please contact... airflow may also refer to order a new one will be treated separately. 138 ZyWALL USG100-PLUS User's Guide Registration Register your household waste disposal service or the store where... Use ONLY an appropriate power adaptor or cord for your vendor and/or the authorized ZyXEL local distributor for North American products. Any replacement will consist of a new or re-...
...city office, your product online to the purchaser. There is in material or workmanship for a specific period (the Warranty Period) from any implied warranty of electrical and electronic equipment. Please contact... airflow may also refer to order a new one will be treated separately. 138 ZyWALL USG100-PLUS User's Guide Registration Register your household waste disposal service or the store where... Use ONLY an appropriate power adaptor or cord for your vendor and/or the authorized ZyXEL local distributor for North American products. Any replacement will consist of a new or re-...