User Guide
Page 17
....2 The General Setup Screen 447 26.3 The Password Screen ...448 26.4 The Time and Date Screen 449 26.4.1 Time Server Synchronization Example 452 26.5 The Device Mode Screen 453 26.5.1 The Device Mode Screen (Router 453 26.5.2 The Device Mode Screen (Bridge 454 26.6 The F/W Upload Screen 457 ZyWALL 2 Plus User's Guide 17
....2 The General Setup Screen 447 26.3 The Password Screen ...448 26.4 The Time and Date Screen 449 26.4.1 Time Server Synchronization Example 452 26.5 The Device Mode Screen 453 26.5.1 The Device Mode Screen (Router 453 26.5.2 The Device Mode Screen (Bridge 454 26.6 The F/W Upload Screen 457 ZyWALL 2 Plus User's Guide 17
User Guide
Page 18
... 27.3 Navigating the SMT Interface 468 27.3.1 Main Menu ...469 27.3.2 SMT Menus Overview 471 27.4 Changing the System Password 472 27.5 Resetting the ZyWALL ...473 Chapter 28 SMT Menu 1 - Table of Contents 26.7 The Backup and Restore Screen 458 26.7.1 Backup Configuration 459 26.7.2 Restore Configuration 459 26.7.3 Back ... (Backup ISP 485 29.7 Editing TCP/IP Options ...487 29.8 Editing Login Script ...488 29.9 Remote Node Filter ...489 Chapter 30 LAN Setup...491 18 ZyWALL 2 Plus User's Guide
... 27.3 Navigating the SMT Interface 468 27.3.1 Main Menu ...469 27.3.2 SMT Menus Overview 471 27.4 Changing the System Password 472 27.5 Resetting the ZyWALL ...473 Chapter 28 SMT Menu 1 - Table of Contents 26.7 The Backup and Restore Screen 458 26.7.1 Backup Configuration 459 26.7.2 Restore Configuration 459 26.7.3 Back ... (Backup ISP 485 29.7 Editing TCP/IP Options ...487 29.8 Editing Login Script ...488 29.9 Remote Node Filter ...489 Chapter 30 LAN Setup...491 18 ZyWALL 2 Plus User's Guide
User Guide
Page 25
... Figures List of Figures Figure 1 Secure Internet Access via Cable, DSL or Wireless Modem 46 Figure 2 VPN Application ...46 Figure 3 Front Panel ...47 Figure 4 Change Password Screen ...50 Figure 5 Replace Certificate Screen ...50 Figure 6 Example Xmodem Upload ...51 Figure 7 HOME Screen ...52 Figure 8 Web Configurator HOME Screen in Router Mode 53... SECURITY > VPN > VPN Rules (IKE)> Add Network Policy 91 Figure 37 SECURITY > FIREWALL > Rule Summary 92 Figure 38 SECURITY > FIREWALL > Rule Summary > Edit: Allow 93 ZyWALL 2 Plus User's Guide 25
... Figures List of Figures Figure 1 Secure Internet Access via Cable, DSL or Wireless Modem 46 Figure 2 VPN Application ...46 Figure 3 Front Panel ...47 Figure 4 Change Password Screen ...50 Figure 5 Replace Certificate Screen ...50 Figure 6 Example Xmodem Upload ...51 Figure 7 HOME Screen ...52 Figure 8 Web Configurator HOME Screen in Router Mode 53... SECURITY > VPN > VPN Rules (IKE)> Add Network Policy 91 Figure 37 SECURITY > FIREWALL > Rule Summary 92 Figure 38 SECURITY > FIREWALL > Rule Summary > Edit: Allow 93 ZyWALL 2 Plus User's Guide 25
User Guide
Page 31
... 427 Figure 276 LOGS > Traffic Statistics: Protocol/Port Example 428 Figure 277 LOGS > E-mail Report ...429 Figure 278 MAINTENANCE > General Setup 448 Figure 279 MAINTENANCE > Password 449 Figure 280 MAINTENANCE > Time and Date 450 Figure 281 Synchronization in Process 452 Figure 282 Synchronization is Successful 452 Figure 283 Synchronization Fail ...453... Temporarily Disconnected 460 Figure 293 Configuration Upload Error 460 Figure 294 Reset Warning Message ...461 Figure 295 MAINTENANCE > Restart 461 Figure 296 MAINTENANCE > Diagnostics 462 ZyWALL 2 Plus User's Guide 31
... 427 Figure 276 LOGS > Traffic Statistics: Protocol/Port Example 428 Figure 277 LOGS > E-mail Report ...429 Figure 278 MAINTENANCE > General Setup 448 Figure 279 MAINTENANCE > Password 449 Figure 280 MAINTENANCE > Time and Date 450 Figure 281 Synchronization in Process 452 Figure 282 Synchronization is Successful 452 Figure 283 Synchronization Fail ...453... Temporarily Disconnected 460 Figure 293 Configuration Upload Error 460 Figure 294 Reset Warning Message ...461 Figure 295 MAINTENANCE > Restart 461 Figure 296 MAINTENANCE > Diagnostics 462 ZyWALL 2 Plus User's Guide 31
User Guide
Page 32
... ...468 Figure 299 Main Menu (Router Mode 469 Figure 300 Main Menu (Bridge Mode 470 Figure 301 Menu 23: System Password 472 Figure 302 Menu 1: General Setup (Router Mode 475 Figure 303 Menu 1: General Setup (Bridge Mode 476 Figure 304 Menu 1.1: Configure Dynamic DNS 477 Figure ... Menu 11.1.5: Traffic Redirect Setup 517 Figure 338 Menu 12: IP Static Route Setup 519 Figure 339 Menu 12. 1: Edit IP Static Route 520 32 ZyWALL 2 Plus User's Guide
... ...468 Figure 299 Main Menu (Router Mode 469 Figure 300 Main Menu (Bridge Mode 470 Figure 301 Menu 23: System Password 472 Figure 302 Menu 1: General Setup (Router Mode 475 Figure 303 Menu 1: General Setup (Bridge Mode 476 Figure 304 Menu 1.1: Configure Dynamic DNS 477 Figure ... Menu 11.1.5: Traffic Redirect Setup 517 Figure 338 Menu 12: IP Static Route Setup 519 Figure 339 Menu 12. 1: Edit IP Static Route 520 32 ZyWALL 2 Plus User's Guide
User Guide
Page 40
... ICMP Notes ...444 Table 152 Syslog Logs ...445 Table 153 RFC-2408 ISAKMP Payload Types 446 Table 154 MAINTENANCE > General Setup 448 Table 155 MAINTENANCE > Password 449 Table 156 MAINTENANCE > Time and Date 450 Table 157 MAINTENANCE > Device Mode (Router Mode 454 Table 158 MAC-address-to-port Mapping Table 455... Summary ...470 Table 165 SMT Menus Overview ...471 Table 166 Menu 1: General Setup (Router Mode 475 Table 167 Menu 1: General Setup (Bridge Mode 476 40 ZyWALL 2 Plus User's Guide
... ICMP Notes ...444 Table 152 Syslog Logs ...445 Table 153 RFC-2408 ISAKMP Payload Types 446 Table 154 MAINTENANCE > General Setup 448 Table 155 MAINTENANCE > Password 449 Table 156 MAINTENANCE > Time and Date 450 Table 157 MAINTENANCE > Device Mode (Router Mode 454 Table 158 MAC-address-to-port Mapping Table 455... Summary ...470 Table 165 SMT Menus Overview ...471 Table 166 Menu 1: General Setup (Router Mode 475 Table 167 Menu 1: General Setup (Bridge Mode 476 40 ZyWALL 2 Plus User's Guide
User Guide
Page 47
... 100Mbps Ethernet connection. On The backup port is sending or receiving packets. Flashing The 100M LAN/DMZ/WLAN is connected. ZyWALL 2 Plus User's Guide 47 Flashing The backup port is not connected. Use a password that's not easy to guess and that consists of different types of characters, such as numbers and letters. •...
... 100Mbps Ethernet connection. On The backup port is sending or receiving packets. Flashing The 100M LAN/DMZ/WLAN is connected. ZyWALL 2 Plus User's Guide 47 Flashing The backup port is not connected. Use a password that's not easy to guess and that consists of different types of characters, such as numbers and letters. •...
User Guide
Page 49
... "192.168.1.1" as the URL. 4 Type "1234" (default) as the password and click Login. if this is properly connected and prepare your computer/ computer network to connect to the ZyWALL (refer to the Quick Start Guide). 2 Launch your device. The recommended screen resolution...browser. Use Internet Explorer 6.0 and later or Netscape Navigator 7.0 and later versions. ZyWALL 2 Plus User's Guide 49 CHAPTER 2 Introducing the Web Configurator This chapter describes how to access the ZyWALL web configurator and provides an overview of its screens. 2.1 Web Configurator Overview The ...
... "192.168.1.1" as the URL. 4 Type "1234" (default) as the password and click Login. if this is properly connected and prepare your computer/ computer network to connect to the ZyWALL (refer to the Quick Start Guide). 2 Launch your device. The recommended screen resolution...browser. Use Internet Explorer 6.0 and later or Netscape Navigator 7.0 and later versions. ZyWALL 2 Plus User's Guide 49 CHAPTER 2 Introducing the Web Configurator This chapter describes how to access the ZyWALL web configurator and provides an overview of its screens. 2.1 Web Configurator Overview The ...
User Guide
Page 50
...) and click Apply or click Ignore. Figure 4 Change Password Screen 6 Click Apply in the Replace Certificate screen to create a certificate using your password (highly recommended) as shown next. Simply log back into the ZyWALL if this happens to this screen displays every time you ...certificate here or in the Administrator Inactivity Timer field expires (default five minutes). Type a new password (and retype it to change your ZyWALL's MAC address that will be specific to you. 50 ZyWALL 2 Plus User's Guide Figure 5 Replace Certificate Screen 7 You should see Figure 8 on page 53...
...) and click Apply or click Ignore. Figure 4 Change Password Screen 6 Click Apply in the Replace Certificate screen to create a certificate using your password (highly recommended) as shown next. Simply log back into the ZyWALL if this happens to this screen displays every time you ...certificate here or in the Administrator Inactivity Timer field expires (default five minutes). Type a new password (and retype it to change your ZyWALL's MAC address that will be specific to you. 50 ZyWALL 2 Plus User's Guide Figure 5 Replace Certificate Screen 7 You should see Figure 8 on page 53...
User Guide
Page 51
... have been restored and the ZyWALL restarts. ZyWALL 2 Plus User's Guide 51 The password will be reset to 1234, also. 2.3.1 Procedure To Use The Reset Button Make sure the PWR LED is on (not blinking) before activating Xmodem upload on your password or cannot access the web configurator... Uploading a Configuration File Via Console Port 1 Download the default configuration file from the ZyXEL FTP site, unzip it and save it in a folder. 2 Turn off . 3 While pressing the RESET button, turn on the ZyWALL again. Then click Send. 6 After successful firmware upload, enter "atgo" to hold...
... have been restored and the ZyWALL restarts. ZyWALL 2 Plus User's Guide 51 The password will be reset to 1234, also. 2.3.1 Procedure To Use The Reset Button Make sure the PWR LED is on (not blinking) before activating Xmodem upload on your password or cannot access the web configurator... Uploading a Configuration File Via Console Port 1 Download the default configuration file from the ZyXEL FTP site, unzip it and save it in a folder. 2 Turn off . 3 While pressing the RESET button, turn on the ZyWALL again. Then click Send. 6 After successful firmware upload, enter "atgo" to hold...
User Guide
Page 58
...password, use the sub-menus on the corresponding port. Table 5 Bridge and Router Mode Features Comparison FEATURE BRIDGE MODE ROUTER MODE Internet Access Wizard Y VPN Wizard Y Y DHCP Table Y System Statistics Y Y Registration Y Y LAN Y WAN Y DMZ Y Bridge Y 58 ZyWALL 2 Plus... User's Guide Security Services Content Filter Expiration Date This is the cost of the incoming packets. Not all ZyWALLs have all features listed in Bridge Mode (continued) LABEL DESCRIPTION Port Status For ...
...password, use the sub-menus on the corresponding port. Table 5 Bridge and Router Mode Features Comparison FEATURE BRIDGE MODE ROUTER MODE Internet Access Wizard Y VPN Wizard Y Y DHCP Table Y System Statistics Y Y Registration Y Y LAN Y WAN Y DMZ Y Bridge Y 58 ZyWALL 2 Plus... User's Guide Security Services Content Filter Expiration Date This is the cost of the incoming packets. Not all ZyWALLs have all features listed in Bridge Mode (continued) LABEL DESCRIPTION Port Status For ...
User Guide
Page 62
...the console port. Log Settings Use this screen to change your password. Password Use this screen to change your ZyWALL work as a router or a bridge. F/W Upload Use this screen to upload firmware to your ZyWALL Backup & Restore Use this screen to backup and restore the ...Traffic Statistics Use this screen to change your ZyWALL. Device Mode Use this screen to have your ZyWALL's log settings. Figure 10 HOME > Show Statistics 62 ZyWALL 2 Plus User's Guide Diagnostics Use this screen to configure and have the ZyWALL record and display network usage reports. Read...
...the console port. Log Settings Use this screen to change your password. Password Use this screen to change your ZyWALL work as a router or a bridge. F/W Upload Use this screen to upload firmware to your ZyWALL Backup & Restore Use this screen to backup and restore the ...Traffic Statistics Use this screen to change your ZyWALL. Device Mode Use this screen to have your ZyWALL's log settings. Figure 10 HOME > Show Statistics 62 ZyWALL 2 Plus User's Guide Diagnostics Use this screen to configure and have the ZyWALL record and display network usage reports. Read...
User Guide
Page 70
... for Internet Access Encapsulation Choose an encapsulation method from the PPPoE server. Retype to Confirm Type your service provider. Password Type the password associated with the user name above. The default time is the default selection. User Name Type the user name given to time out...when you do not want the connection to you a fixed IP address. Nailed-Up Select Nailed-Up if you select Static. 70 ZyWALL 2 Plus User's Guide Table 12 ISP Parameters: PPPoE Encapsulation LABEL DESCRIPTION ISP Parameter for confirmation. PPP over Ethernet forms a dial-up connection.
... for Internet Access Encapsulation Choose an encapsulation method from the PPPoE server. Retype to Confirm Type your service provider. Password Type the password associated with the user name above. The default time is the default selection. User Name Type the user name given to time out...when you do not want the connection to you a fixed IP address. Nailed-Up Select Nailed-Up if you select Static. 70 ZyWALL 2 Plus User's Guide Table 12 ISP Parameters: PPPoE Encapsulation LABEL DESCRIPTION ISP Parameter for confirmation. PPP over Ethernet forms a dial-up connection.
User Guide
Page 72
Password Type the password associated with the User Name above. Nailed-Up Select Nailed-Up if you do not want the connection to you by your ISP. Idle Timeout ... for confirmation. User Name Type the user name given to Confirm Type your ISP. 72 ZyWALL 2 Plus User's Guide Retype to you must configure the User Name and Password fields for a PPP connection and the PPTP parameters for Internet Access Encapsulation Select PPTP from the PPTP server. Chapter 3 Wizard Setup Figure 17 ISP...
Password Type the password associated with the User Name above. Nailed-Up Select Nailed-Up if you do not want the connection to you by your ISP. Idle Timeout ... for confirmation. User Name Type the user name given to Confirm Type your ISP. 72 ZyWALL 2 Plus User's Guide Retype to you must configure the User Name and Password fields for a PPP connection and the PPTP parameters for Internet Access Encapsulation Select PPTP from the PPTP server. Chapter 3 Wizard Setup Figure 17 ISP...
User Guide
Page 75
... myZyXEL.com database to 80 alphanumeric characters (periods and the underscore are not allowed. Spaces are available. Confirm Password Enter the password again for your ZyWALL. E-Mail Address Enter your country from six to finish. Back Click Back to return to continue. New myZyXEL... Existing myZyXEL.com account, only the User Name and Password fields are not allowed. Country Select your e-mail address. Next Click Next to the previous screen. After you entered has not been used. ZyWALL 2 Plus User's Guide 75 Table 14 Internet Access Wizard: Registration...
... myZyXEL.com database to 80 alphanumeric characters (periods and the underscore are not allowed. Spaces are available. Confirm Password Enter the password again for your ZyWALL. E-Mail Address Enter your country from six to finish. Back Click Back to return to continue. New myZyXEL... Existing myZyXEL.com account, only the User Name and Password fields are not allowed. Country Select your e-mail address. Next Click Next to the previous screen. After you entered has not been used. ZyWALL 2 Plus User's Guide 75 Table 14 Internet Access Wizard: Registration...
User Guide
Page 81
...than MD5, but is more processing power, resulting in increased latency and decreased throughput. A pre-shared key identifies a communicating party during a phase 1 IKE negotiation. ZyWALL 2 Plus User's Guide 81 MD5 (Message Digest 5) and SHA1 (Secure Hash Algorithm) are temporarily disconnected. DH5 refers to the previous screen. A short SA Life Time ... 0x denotes that uses a 168-bit key. Select MD5 for minimal security and SHA-1 for data communications, both sender and receiver must use separate passwords. It is not used to use the same pre-shared key.
...than MD5, but is more processing power, resulting in increased latency and decreased throughput. A pre-shared key identifies a communicating party during a phase 1 IKE negotiation. ZyWALL 2 Plus User's Guide 81 MD5 (Message Digest 5) and SHA1 (Secure Hash Algorithm) are temporarily disconnected. DH5 refers to the previous screen. A short SA Life Time ... 0x denotes that uses a 168-bit key. Select MD5 for minimal security and SHA-1 for data communications, both sender and receiver must use separate passwords. It is not used to use the same pre-shared key.
User Guide
Page 96
...If your ISP didn't give you for Internet Access section, enter the information (such as the user name and password) provided by your ZyWALL for Internet access using PPPoE in this example. Figure 42 Tutorial Example: WAN Connection with a Static IP Address... Address and enter the first fixed public IP address (1.2.3.4 in this example). 5 Click Apply. 96 ZyWALL 2 Plus User's Guide Encapsulation Public IP Addresses Gateway IP Address Subnet Mask User Name Password DNS Server PPPoE 1.2.3.4 1.2.3.5 1.2.3.6 1.2.3.7 1.2.3.89 255.255.255.0 exampleuser abcd1234 1.2.1.1 1.2.1.2 Follow the ...
...If your ISP didn't give you for Internet Access section, enter the information (such as the user name and password) provided by your ZyWALL for Internet access using PPPoE in this example. Figure 42 Tutorial Example: WAN Connection with a Static IP Address... Address and enter the first fixed public IP address (1.2.3.4 in this example). 5 Click Apply. 96 ZyWALL 2 Plus User's Guide Encapsulation Public IP Addresses Gateway IP Address Subnet Mask User Name Password DNS Server PPPoE 1.2.3.4 1.2.3.5 1.2.3.6 1.2.3.7 1.2.3.89 255.255.255.0 exampleuser abcd1234 1.2.1.1 1.2.1.2 Follow the ...
User Guide
Page 126
...haven't created an account at myZyXEL.com (through the ZyWALL). 5.2 The Registration Screen To register your ZyWALL. You can use a subscription service, you select Existing myZyXEL.com account, only the User Name and Password fields are available. New myZyXEL.com account If you already...configure the following table describes the labels in this option and enter account your user name and password in the fields below to register your ZyWALL. 126 ZyWALL 2 Plus User's Guide Subscribe to category-based content filtering to block access to web sites. Content filtering ...
...haven't created an account at myZyXEL.com (through the ZyWALL). 5.2 The Registration Screen To register your ZyWALL. You can use a subscription service, you select Existing myZyXEL.com account, only the User Name and Password fields are available. New myZyXEL.com account If you already...configure the following table describes the labels in this option and enter account your user name and password in the fields below to register your ZyWALL. 126 ZyWALL 2 Plus User's Guide Subscribe to category-based content filtering to block access to web sites. Content filtering ...
User Guide
Page 127
...20 alphanumeric characters (and the underscore). Confirm Password Enter the password again for your myZyXEL.com account. You can try trial service subscription. Apply Click Apply to save your service subscription status. Figure 89 REGISTRATION: Registered Device ZyWALL 2 Plus User's Guide 127 The name should be... from the drop-down box list. Spaces are activated. The trial period starts the day you entered has not been used. " If the ZyWALL is registered already, this screen is...
...20 alphanumeric characters (and the underscore). Confirm Password Enter the password again for your myZyXEL.com account. You can try trial service subscription. Apply Click Apply to save your service subscription status. Figure 89 REGISTRATION: Registered Device ZyWALL 2 Plus User's Guide 127 The name should be... from the drop-down box list. Spaces are activated. The trial period starts the day you entered has not been used. " If the ZyWALL is registered already, this screen is...
User Guide
Page 151
... so that a computer in one location can be static (fixed) or dynamically assigned by the ZyWALL to configure the backup WAN dial- If your ZyWALL for Internet access on the ZyWALL. • Use the Traffic Redirect screen (Section 8.4 on page 163) to configure an alternative... they should also provide a username and password (and service name) for the ZyWALL, which makes it accessible from an upper layer protocol into a lower layer protocol. ZyWALL 2 Plus User's Guide 151 CHAPTER 8 WAN Screens 8.1 Overview This chapter discusses the ZyWALL's WAN screens. If your ISP (Internet...
... so that a computer in one location can be static (fixed) or dynamically assigned by the ZyWALL to configure the backup WAN dial- If your ZyWALL for Internet access on the ZyWALL. • Use the Traffic Redirect screen (Section 8.4 on page 163) to configure an alternative... they should also provide a username and password (and service name) for the ZyWALL, which makes it accessible from an upper layer protocol into a lower layer protocol. ZyWALL 2 Plus User's Guide 151 CHAPTER 8 WAN Screens 8.1 Overview This chapter discusses the ZyWALL's WAN screens. If your ISP (Internet...