User Guide
Page 1
ZyWALL 2 Plus Internet Security Appliance User's Guide Version 4.04 2/2008 Edition 1 www.zyxel.com
ZyWALL 2 Plus Internet Security Appliance User's Guide Version 4.04 2/2008 Edition 1 www.zyxel.com
User Guide
Page 3
... II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. E-mail: techwriters@zyxel.com.tw ZyWALL 2 Plus User's Guide 3 Thank you! Send all User Guide-related comments, questions or suggestions for people who want to www.zyxel.com for additional support documentation and product certifications. About This User's Guide About This User's Guide Intended Audience This manual is recommended you use e-mail instead. It...
... II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. E-mail: techwriters@zyxel.com.tw ZyWALL 2 Plus User's Guide 3 Thank you! Send all User Guide-related comments, questions or suggestions for people who want to www.zyxel.com for additional support documentation and product certifications. About This User's Guide About This User's Guide Intended Audience This manual is recommended you use e-mail instead. It...
User Guide
Page 4
...is" or "in other things you may be referred to as the "ZyWALL", the "device" or the "system" in this User's Guide. • Product labels, screen names, field labels and field choices are shown in this User's Guide. 1 Warnings tell you about things that could harm you or your ...[ENTER] means the "enter" or "return" key on . • "e.g.," is a shorthand for "for example, other words". 4 ZyWALL 2 Plus User's Guide Syntax Conventions • The ZyWALL 2 Plus may need to type one of measurement may denote "1000000" or "1048576" and so on your device. For example, "k" for kilo may...
...is" or "in other things you may be referred to as the "ZyWALL", the "device" or the "system" in this User's Guide. • Product labels, screen names, field labels and field choices are shown in this User's Guide. 1 Warnings tell you about things that could harm you or your ...[ENTER] means the "enter" or "return" key on . • "e.g.," is a shorthand for "for example, other words". 4 ZyWALL 2 Plus User's Guide Syntax Conventions • The ZyWALL 2 Plus may need to type one of measurement may denote "1000000" or "1048576" and so on your device. For example, "k" for kilo may...
User Guide
Page 5
Document Conventions Icons Used in Figures Figures in this User's Guide may use the following generic icons. ZyWALL Computer Notebook computer Server DSLAM Firewall Telephone Switch Router ZyWALL 2 Plus User's Guide 5 The ZyWALL icon is not an exact representation of your device.
Document Conventions Icons Used in Figures Figures in this User's Guide may use the following generic icons. ZyWALL Computer Notebook computer Server DSLAM Firewall Telephone Switch Router ZyWALL 2 Plus User's Guide 5 The ZyWALL icon is not an exact representation of your device.
User Guide
Page 6
... if the power adaptor or cord is damaged as it might cause electrocution. • If the power adaptor or cord is damaged, remove it properly. 6 ZyWALL 2 Plus User's Guide Please contact your vendor for further information. • Make sure to connect the cables to dangerous high voltage points or other risks. There is recyclable...
... if the power adaptor or cord is damaged as it might cause electrocution. • If the power adaptor or cord is damaged, remove it properly. 6 ZyWALL 2 Plus User's Guide Please contact your vendor for further information. • Make sure to connect the cables to dangerous high voltage points or other risks. There is recyclable...
User Guide
Page 7
Contents Overview Contents Overview Introduction and Registration 43 Getting to Know Your ZyWALL 45 Introducing the Web Configurator 49 Wizard Setup ...67 Tutorials ...87 Registration Screens ...125 Network ...129 LAN Screens ...131 Bridge Screens ...143 WAN Screens ...151 ... ...365 Remote Management Screens 377 UPnP Screens ...397 Custom Application Screen ...407 ALG Screen ...409 Logs and Maintenance ...415 Logs Screens ...417 Maintenance Screens ...447 ZyWALL 2 Plus User's Guide 7
Contents Overview Contents Overview Introduction and Registration 43 Getting to Know Your ZyWALL 45 Introducing the Web Configurator 49 Wizard Setup ...67 Tutorials ...87 Registration Screens ...125 Network ...129 LAN Screens ...131 Bridge Screens ...143 WAN Screens ...151 ... ...365 Remote Management Screens 377 UPnP Screens ...397 Custom Application Screen ...407 ALG Screen ...409 Logs and Maintenance ...415 Logs Screens ...417 Maintenance Screens ...447 ZyWALL 2 Plus User's Guide 7
User Guide
Page 8
... System Maintenance Menus 8 to 10 587 Remote Management ...595 Call Scheduling ...599 Troubleshooting and Specifications 603 Troubleshooting ...605 Product Specifications ...613 Appendices and Index ...619 8 ZyWALL 2 Plus User's Guide Contents Overview SMT ...465 Introducing the SMT ...467 SMT Menu 1 -
... System Maintenance Menus 8 to 10 587 Remote Management ...595 Call Scheduling ...599 Troubleshooting and Specifications 603 Troubleshooting ...605 Product Specifications ...613 Appendices and Index ...619 8 ZyWALL 2 Plus User's Guide Contents Overview SMT ...465 Introducing the SMT ...467 SMT Menu 1 -
User Guide
Page 9
... 2.1 Web Configurator Overview 49 2.2 Accessing the ZyWALL Web Configurator 49 2.3 Resetting the ZyWALL ...51 2.3.1 Procedure To Use The Reset Button 51 2.3.2 Uploading a Configuration File Via Console Port 51 2.4 Navigating the ZyWALL Web Configurator 52 2.4.1 Title Bar ...52 2.4.2 Main Window ...52 2.4.3 HOME Screen: Router Mode 53 2.4.4 HOME Screen: Bridge Mode 55 2.4.5 Navigation Panel ...58 ZyWALL 2 Plus User's Guide 9
... 2.1 Web Configurator Overview 49 2.2 Accessing the ZyWALL Web Configurator 49 2.3 Resetting the ZyWALL ...51 2.3.1 Procedure To Use The Reset Button 51 2.3.2 Uploading a Configuration File Via Console Port 51 2.4 Navigating the ZyWALL Web Configurator 52 2.4.1 Title Bar ...52 2.4.2 Main Window ...52 2.4.3 HOME Screen: Router Mode 53 2.4.4 HOME Screen: Bridge Mode 55 2.4.5 Navigation Panel ...58 ZyWALL 2 Plus User's Guide 9
User Guide
Page 10
... 105 4.2.6 Testing the Connections 112 4.3 Using NAT with Multiple Game Players 112 4.4 How to Manage the ZyWALL's Bandwidth 113 4.4.1 Example Parameters and Scenario 113 4.4.2 Configuring Bandwidth Management Rules 114 4.5 Configuring Content Filtering 118 4.5.1 Enable Content Filtering 118 4.5.2 Block Categories of Web Content 119 4.5.3 Assign Bob's Computer a Specific IP Address 121 10 ZyWALL 2 Plus User's Guide
... 105 4.2.6 Testing the Connections 112 4.3 Using NAT with Multiple Game Players 112 4.4 How to Manage the ZyWALL's Bandwidth 113 4.4.1 Example Parameters and Scenario 113 4.4.2 Configuring Bandwidth Management Rules 114 4.5 Configuring Content Filtering 118 4.5.1 Enable Content Filtering 118 4.5.2 Block Categories of Web Content 119 4.5.3 Assign Bob's Computer a Specific IP Address 121 10 ZyWALL 2 Plus User's Guide
User Guide
Page 11
... the WAN Screens 151 8.1.2 What You Need To Know About WAN 151 8.2 The WAN Route Screen ...152 8.3 The WAN Screen ...153 8.3.1 Configuring Ethernet Encapsulation 155 ZyWALL 2 Plus User's Guide 11
... the WAN Screens 151 8.1.2 What You Need To Know About WAN 151 8.2 The WAN Route Screen ...152 8.3 The WAN Screen ...153 8.3.1 Configuring Ethernet Encapsulation 155 ZyWALL 2 Plus User's Guide 11
User Guide
Page 12
... Need To Know About The ZyWALL Firewall 196 11.1.3 Before You Begin ...196 11.2 Firewall Rules Examples 196 11.3 The Firewall Default Rule Screen (Router Mode 198 11.4 The Firewall Default Rule Screen (Bridge Mode 200 11.5 The Firewall Rule Summary Screen 202 11.5.1 The Firewall Edit Rule Screen 204 12 ZyWALL 2 Plus User's Guide
... Need To Know About The ZyWALL Firewall 196 11.1.3 Before You Begin ...196 11.2 Firewall Rules Examples 196 11.3 The Firewall Default Rule Screen (Router Mode 198 11.4 The Firewall Default Rule Screen (Bridge Mode 200 11.5 The Firewall Rule Summary Screen 202 11.5.1 The Firewall Edit Rule Screen 204 12 ZyWALL 2 Plus User's Guide
User Guide
Page 13
... 14.4 The SA Monitor Screen 275 14.5 The Global Setting Screen 275 14.5.1 Configuring the Global Setting Screen 277 14.6 Telecommuter VPN/IPSec Examples 278 ZyWALL 2 Plus User's Guide 13
... 14.4 The SA Monitor Screen 275 14.5 The Global Setting Screen 275 14.5.1 Configuring the Global Setting Screen 277 14.6 Telecommuter VPN/IPSec Examples 278 ZyWALL 2 Plus User's Guide 13
User Guide
Page 14
... ...323 16.1.1 What You Can Do in the Authentication Server Screens 323 16.1.2 What You Need To Know About Authentication Server 323 16.2 The Local User Database Screen 324 16.3 The RADIUS Screen ...326 Part IV: Advanced 329 Chapter 17 Network Address Translation (NAT) Screens 331 17.1 Overview ...331 14 ZyWALL 2 Plus User's Guide
... ...323 16.1.1 What You Can Do in the Authentication Server Screens 323 16.1.2 What You Need To Know About Authentication Server 323 16.2 The Local User Database Screen 324 16.3 The RADIUS Screen ...326 Part IV: Advanced 329 Chapter 17 Network Address Translation (NAT) Screens 331 17.1 Overview ...331 14 ZyWALL 2 Plus User's Guide
User Guide
Page 15
... ...365 20.1.1 What You Can Do in the DNS Screens 365 20.1.2 What You Need To Know About DNS 365 20.2 The System Screen ...367 ZyWALL 2 Plus User's Guide 15
... ...365 20.1.1 What You Can Do in the DNS Screens 365 20.1.2 What You Need To Know About DNS 365 20.2 The System Screen ...367 ZyWALL 2 Plus User's Guide 15
User Guide
Page 16
... 22.2.2 Using UPnP in Windows XP Example 400 22.3 The UPnP Screen ...404 22.4 The Ports Screen ...405 Chapter 23 Custom Application Screen 407 16 ZyWALL 2 Plus User's Guide
... 22.2.2 Using UPnP in Windows XP Example 400 22.3 The UPnP Screen ...404 22.4 The Ports Screen ...405 Chapter 23 Custom Application Screen 407 16 ZyWALL 2 Plus User's Guide
User Guide
Page 17
... 26.5 The Device Mode Screen 453 26.5.1 The Device Mode Screen (Router 453 26.5.2 The Device Mode Screen (Bridge 454 26.6 The F/W Upload Screen 457 ZyWALL 2 Plus User's Guide 17
... 26.5 The Device Mode Screen 453 26.5.1 The Device Mode Screen (Router 453 26.5.2 The Device Mode Screen (Bridge 454 26.6 The F/W Upload Screen 457 ZyWALL 2 Plus User's Guide 17
User Guide
Page 18
... 468 27.3 Navigating the SMT Interface 468 27.3.1 Main Menu ...469 27.3.2 SMT Menus Overview 471 27.4 Changing the System Password 472 27.5 Resetting the ZyWALL ...473 Chapter 28 SMT Menu 1 - Table of Contents 26.7 The Backup and Restore Screen 458 26.7.1 Backup Configuration 459 26.7.2 Restore Configuration 459 26.7.3 Back... (Backup ISP 485 29.7 Editing TCP/IP Options ...487 29.8 Editing Login Script ...488 29.9 Remote Node Filter ...489 Chapter 30 LAN Setup...491 18 ZyWALL 2 Plus User's Guide
... 468 27.3 Navigating the SMT Interface 468 27.3.1 Main Menu ...469 27.3.2 SMT Menus Overview 471 27.4 Changing the System Password 472 27.5 Resetting the ZyWALL ...473 Chapter 28 SMT Menu 1 - Table of Contents 26.7 The Backup and Restore Screen 458 26.7.1 Backup Configuration 459 26.7.2 Restore Configuration 459 26.7.3 Back... (Backup ISP 485 29.7 Editing TCP/IP Options ...487 29.8 Editing Login Script ...488 29.9 Remote Node Filter ...489 Chapter 30 LAN Setup...491 18 ZyWALL 2 Plus User's Guide
User Guide
Page 19
....4 Edit IP ...514 34.5 Remote Node Filter ...516 34.6 Traffic Redirect ...517 Chapter 35 IP Static Route Setup...519 35.1 IP Static Route Setup ...519 ZyWALL 2 Plus User's Guide 19
....4 Edit IP ...514 34.5 Remote Node Filter ...516 34.6 Traffic Redirect ...517 Chapter 35 IP Static Route Setup...519 35.1 IP Static Route Setup ...519 ZyWALL 2 Plus User's Guide 19
User Guide
Page 20
...Trigger Port Forwarding 537 36.5.1 Two Points To Remember About Trigger Ports 537 Chapter 37 Introducing the ZyWALL Firewall 539 37.1 Using ZyWALL SMT Menus 539 37.1.1 Activating the Firewall 539 Chapter 38 Filter Configuration...541 38.1 Introduction to... Filters ...541 38.1.1 The Filter Structure of the ZyWALL 542 38.2 Configuring a Filter Set ...544 38.2.1 Configuring a Filter Rule 546 38.2.2 Configuring a TCP/IP Filter... ...557 39.1 SNMP Configuration ...557 39.2 SNMP Traps ...558 20 ZyWALL 2 Plus User's Guide
...Trigger Port Forwarding 537 36.5.1 Two Points To Remember About Trigger Ports 537 Chapter 37 Introducing the ZyWALL Firewall 539 37.1 Using ZyWALL SMT Menus 539 37.1.1 Activating the Firewall 539 Chapter 38 Filter Configuration...541 38.1 Introduction to... Filters ...541 38.1.1 The Filter Structure of the ZyWALL 542 38.2 Configuring a Filter Set ...544 38.2.1 Configuring a Filter Rule 546 38.2.2 Configuring a TCP/IP Filter... ...557 39.1 SNMP Configuration ...557 39.2 SNMP Traps ...558 20 ZyWALL 2 Plus User's Guide
User Guide
Page 21
... 41.5.8 Uploading Firmware File Via Console Port 583 41.5.9 Example Xmodem Firmware Upload Using HyperTerminal 583 41.5.10 Uploading Configuration File Via Console Port 584 ZyWALL 2 Plus User's Guide 21
... 41.5.8 Uploading Firmware File Via Console Port 583 41.5.9 Example Xmodem Firmware Upload Using HyperTerminal 583 41.5.10 Uploading Configuration File Via Console Port 584 ZyWALL 2 Plus User's Guide 21