User Guide
Page 1
ZyWALL 2 Plus Internet Security Appliance User's Guide Version 4.04 2/2008 Edition 1 www.zyxel.com
ZyWALL 2 Plus Internet Security Appliance User's Guide Version 4.04 2/2008 Edition 1 www.zyxel.com
User Guide
Page 3
... Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. User Guide Feedback Help us help you use e-mail instead. Thank you . E-mail: techwriters@zyxel.com.tw ZyWALL 2 Plus User's Guide 3 You should have at least a basic knowledge of individual screens and supplementary information. " It is recommended you get up your network and configuring for...
... Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. User Guide Feedback Help us help you use e-mail instead. Thank you . E-mail: techwriters@zyxel.com.tw ZyWALL 2 Plus User's Guide 3 You should have at least a basic knowledge of individual screens and supplementary information. " It is recommended you get up your network and configuring for...
User Guide
Page 4
... on your device. Syntax Conventions • The ZyWALL 2 Plus may be referred to as the "ZyWALL", the "device" or the "system" in this User's Guide. • Product labels, screen names, field labels and field choices are shown in this User's Guide. 1 Warnings tell you about things that could ...harm you first click Maintenance in other words". 4 ZyWALL 2 Plus User's Guide " Notes tell you other important information (for you may need to use one...
... on your device. Syntax Conventions • The ZyWALL 2 Plus may be referred to as the "ZyWALL", the "device" or the "system" in this User's Guide. • Product labels, screen names, field labels and field choices are shown in this User's Guide. 1 Warnings tell you about things that could ...harm you first click Maintenance in other words". 4 ZyWALL 2 Plus User's Guide " Notes tell you other important information (for you may need to use one...
User Guide
Page 5
Document Conventions Icons Used in Figures Figures in this User's Guide may use the following generic icons. The ZyWALL icon is not an exact representation of your device. ZyWALL Computer Notebook computer Server DSLAM Firewall Telephone Switch Router ZyWALL 2 Plus User's Guide 5
Document Conventions Icons Used in Figures Figures in this User's Guide may use the following generic icons. The ZyWALL icon is not an exact representation of your device. ZyWALL Computer Notebook computer Server DSLAM Firewall Telephone Switch Router ZyWALL 2 Plus User's Guide 5
User Guide
Page 6
... the power adaptor or cord is damaged as it might cause electrocution. • If the power adaptor or cord is damaged, remove it properly. 6 ZyWALL 2 Plus User's Guide This product is a remote risk of it from the power outlet. • Do NOT attempt to repair the power adaptor or cord. There is recyclable...
... the power adaptor or cord is damaged as it might cause electrocution. • If the power adaptor or cord is damaged, remove it properly. 6 ZyWALL 2 Plus User's Guide This product is a remote risk of it from the power outlet. • Do NOT attempt to repair the power adaptor or cord. There is recyclable...
User Guide
Page 7
Contents Overview Contents Overview Introduction and Registration 43 Getting to Know Your ZyWALL 45 Introducing the Web Configurator 49 Wizard Setup ...67 Tutorials ...87 Registration Screens ...125 Network ...129 LAN Screens ...131 Bridge Screens ...143 WAN Screens ...151 ... ...365 Remote Management Screens 377 UPnP Screens ...397 Custom Application Screen ...407 ALG Screen ...409 Logs and Maintenance ...415 Logs Screens ...417 Maintenance Screens ...447 ZyWALL 2 Plus User's Guide 7
Contents Overview Contents Overview Introduction and Registration 43 Getting to Know Your ZyWALL 45 Introducing the Web Configurator 49 Wizard Setup ...67 Tutorials ...87 Registration Screens ...125 Network ...129 LAN Screens ...131 Bridge Screens ...143 WAN Screens ...151 ... ...365 Remote Management Screens 377 UPnP Screens ...397 Custom Application Screen ...407 ALG Screen ...409 Logs and Maintenance ...415 Logs Screens ...417 Maintenance Screens ...447 ZyWALL 2 Plus User's Guide 7
User Guide
Page 8
... System Maintenance Menus 8 to 10 587 Remote Management ...595 Call Scheduling ...599 Troubleshooting and Specifications 603 Troubleshooting ...605 Product Specifications ...613 Appendices and Index ...619 8 ZyWALL 2 Plus User's Guide Contents Overview SMT ...465 Introducing the SMT ...467 SMT Menu 1 -
... System Maintenance Menus 8 to 10 587 Remote Management ...595 Call Scheduling ...599 Troubleshooting and Specifications 603 Troubleshooting ...605 Product Specifications ...613 Appendices and Index ...619 8 ZyWALL 2 Plus User's Guide Contents Overview SMT ...465 Introducing the SMT ...467 SMT Menu 1 -
User Guide
Page 9
Table of Contents Table of Contents About This User's Guide ...3 Document Conventions...4 Safety Warnings...6 Contents Overview ...7 Table of Contents...9 List of Figures ...25 List of Tables...37 Part I: Introduction and Registration 43 Chapter 1 Getting to Know Your ZyWALL 45 1.1 ZyWALL Internet Security Appliance Overview 45 1.2 Applications for the ZyWALL 45 1.2.1 Secure Broadband Internet Access via Cable...
Table of Contents Table of Contents About This User's Guide ...3 Document Conventions...4 Safety Warnings...6 Contents Overview ...7 Table of Contents...9 List of Figures ...25 List of Tables...37 Part I: Introduction and Registration 43 Chapter 1 Getting to Know Your ZyWALL 45 1.1 ZyWALL Internet Security Appliance Overview 45 1.2 Applications for the ZyWALL 45 1.2.1 Secure Broadband Internet Access via Cable...
User Guide
Page 10
... 4.2.6 Testing the Connections 112 4.3 Using NAT with Multiple Game Players 112 4.4 How to Manage the ZyWALL's Bandwidth 113 4.4.1 Example Parameters and Scenario 113 4.4.2 Configuring Bandwidth Management Rules 114 4.5 Configuring Content Filtering 118 4.5.1 Enable Content Filtering 118 4.5.2 Block Categories of Web Content 119 4.5.3 Assign Bob's Computer a Specific IP Address 121 10 ZyWALL 2 Plus User's Guide
... 4.2.6 Testing the Connections 112 4.3 Using NAT with Multiple Game Players 112 4.4 How to Manage the ZyWALL's Bandwidth 113 4.4.1 Example Parameters and Scenario 113 4.4.2 Configuring Bandwidth Management Rules 114 4.5 Configuring Content Filtering 118 4.5.1 Enable Content Filtering 118 4.5.2 Block Categories of Web Content 119 4.5.3 Assign Bob's Computer a Specific IP Address 121 10 ZyWALL 2 Plus User's Guide
User Guide
Page 11
... the WAN Screens 151 8.1.2 What You Need To Know About WAN 151 8.2 The WAN Route Screen ...152 8.3 The WAN Screen ...153 8.3.1 Configuring Ethernet Encapsulation 155 ZyWALL 2 Plus User's Guide 11
... the WAN Screens 151 8.1.2 What You Need To Know About WAN 151 8.2 The WAN Route Screen ...152 8.3 The WAN Screen ...153 8.3.1 Configuring Ethernet Encapsulation 155 ZyWALL 2 Plus User's Guide 11
User Guide
Page 12
... To Know About The ZyWALL Firewall 196 11.1.3 Before You Begin ...196 11.2 Firewall Rules Examples 196 11.3 The Firewall Default Rule Screen (Router Mode 198 11.4 The Firewall Default Rule Screen (Bridge Mode 200 11.5 The Firewall Rule Summary Screen 202 11.5.1 The Firewall Edit Rule Screen 204 12 ZyWALL 2 Plus User's Guide
... To Know About The ZyWALL Firewall 196 11.1.3 Before You Begin ...196 11.2 Firewall Rules Examples 196 11.3 The Firewall Default Rule Screen (Router Mode 198 11.4 The Firewall Default Rule Screen (Bridge Mode 200 11.5 The Firewall Rule Summary Screen 202 11.5.1 The Firewall Edit Rule Screen 204 12 ZyWALL 2 Plus User's Guide
User Guide
Page 13
... 14.4 The SA Monitor Screen 275 14.5 The Global Setting Screen 275 14.5.1 Configuring the Global Setting Screen 277 14.6 Telecommuter VPN/IPSec Examples 278 ZyWALL 2 Plus User's Guide 13
... 14.4 The SA Monitor Screen 275 14.5 The Global Setting Screen 275 14.5.1 Configuring the Global Setting Screen 277 14.6 Telecommuter VPN/IPSec Examples 278 ZyWALL 2 Plus User's Guide 13
User Guide
Page 14
... ...323 16.1.1 What You Can Do in the Authentication Server Screens 323 16.1.2 What You Need To Know About Authentication Server 323 16.2 The Local User Database Screen 324 16.3 The RADIUS Screen ...326 Part IV: Advanced 329 Chapter 17 Network Address Translation (NAT) Screens 331 17.1 Overview ...331 14 ZyWALL 2 Plus User's Guide
... ...323 16.1.1 What You Can Do in the Authentication Server Screens 323 16.1.2 What You Need To Know About Authentication Server 323 16.2 The Local User Database Screen 324 16.3 The RADIUS Screen ...326 Part IV: Advanced 329 Chapter 17 Network Address Translation (NAT) Screens 331 17.1 Overview ...331 14 ZyWALL 2 Plus User's Guide
User Guide
Page 15
... ...365 20.1.1 What You Can Do in the DNS Screens 365 20.1.2 What You Need To Know About DNS 365 20.2 The System Screen ...367 ZyWALL 2 Plus User's Guide 15
... ...365 20.1.1 What You Can Do in the DNS Screens 365 20.1.2 What You Need To Know About DNS 365 20.2 The System Screen ...367 ZyWALL 2 Plus User's Guide 15
User Guide
Page 16
... 22.2.2 Using UPnP in Windows XP Example 400 22.3 The UPnP Screen ...404 22.4 The Ports Screen ...405 Chapter 23 Custom Application Screen 407 16 ZyWALL 2 Plus User's Guide
... 22.2.2 Using UPnP in Windows XP Example 400 22.3 The UPnP Screen ...404 22.4 The Ports Screen ...405 Chapter 23 Custom Application Screen 407 16 ZyWALL 2 Plus User's Guide
User Guide
Page 17
... 26.5 The Device Mode Screen 453 26.5.1 The Device Mode Screen (Router 453 26.5.2 The Device Mode Screen (Bridge 454 26.6 The F/W Upload Screen 457 ZyWALL 2 Plus User's Guide 17
... 26.5 The Device Mode Screen 453 26.5.1 The Device Mode Screen (Router 453 26.5.2 The Device Mode Screen (Bridge 454 26.6 The F/W Upload Screen 457 ZyWALL 2 Plus User's Guide 17
User Guide
Page 18
... ISP 485 29.7 Editing TCP/IP Options ...487 29.8 Editing Login Script ...488 29.9 Remote Node Filter ...489 Chapter 30 LAN Setup...491 18 ZyWALL 2 Plus User's Guide General Setup 475 28.1 Introduction to General Setup 475 28.2 Configuring General Setup 475 28.2.1 Configuring Dynamic DNS 476 Chapter 29 WAN and Dial Backup... 468 27.3 Navigating the SMT Interface 468 27.3.1 Main Menu ...469 27.3.2 SMT Menus Overview 471 27.4 Changing the System Password 472 27.5 Resetting the ZyWALL ...473 Chapter 28 SMT Menu 1 -
... ISP 485 29.7 Editing TCP/IP Options ...487 29.8 Editing Login Script ...488 29.9 Remote Node Filter ...489 Chapter 30 LAN Setup...491 18 ZyWALL 2 Plus User's Guide General Setup 475 28.1 Introduction to General Setup 475 28.2 Configuring General Setup 475 28.2.1 Configuring Dynamic DNS 476 Chapter 29 WAN and Dial Backup... 468 27.3 Navigating the SMT Interface 468 27.3.1 Main Menu ...469 27.3.2 SMT Menus Overview 471 27.4 Changing the System Password 472 27.5 Resetting the ZyWALL ...473 Chapter 28 SMT Menu 1 -
User Guide
Page 19
....4 Edit IP ...514 34.5 Remote Node Filter ...516 34.6 Traffic Redirect ...517 Chapter 35 IP Static Route Setup...519 35.1 IP Static Route Setup ...519 ZyWALL 2 Plus User's Guide 19
....4 Edit IP ...514 34.5 Remote Node Filter ...516 34.6 Traffic Redirect ...517 Chapter 35 IP Static Route Setup...519 35.1 IP Static Route Setup ...519 ZyWALL 2 Plus User's Guide 19
User Guide
Page 20
...Trigger Port Forwarding 537 36.5.1 Two Points To Remember About Trigger Ports 537 Chapter 37 Introducing the ZyWALL Firewall 539 37.1 Using ZyWALL SMT Menus 539 37.1.1 Activating the Firewall 539 Chapter 38 Filter Configuration...541 38.1 Introduction to... Filters ...541 38.1.1 The Filter Structure of the ZyWALL 542 38.2 Configuring a Filter Set ...544 38.2.1 Configuring a Filter Rule 546 38.2.2 Configuring a TCP/IP Filter... ...557 39.1 SNMP Configuration ...557 39.2 SNMP Traps ...558 20 ZyWALL 2 Plus User's Guide
...Trigger Port Forwarding 537 36.5.1 Two Points To Remember About Trigger Ports 537 Chapter 37 Introducing the ZyWALL Firewall 539 37.1 Using ZyWALL SMT Menus 539 37.1.1 Activating the Firewall 539 Chapter 38 Filter Configuration...541 38.1 Introduction to... Filters ...541 38.1.1 The Filter Structure of the ZyWALL 542 38.2 Configuring a Filter Set ...544 38.2.1 Configuring a Filter Rule 546 38.2.2 Configuring a TCP/IP Filter... ...557 39.1 SNMP Configuration ...557 39.2 SNMP Traps ...558 20 ZyWALL 2 Plus User's Guide
User Guide
Page 21
... 41.5.8 Uploading Firmware File Via Console Port 583 41.5.9 Example Xmodem Firmware Upload Using HyperTerminal 583 41.5.10 Uploading Configuration File Via Console Port 584 ZyWALL 2 Plus User's Guide 21
... 41.5.8 Uploading Firmware File Via Console Port 583 41.5.9 Example Xmodem Firmware Upload Using HyperTerminal 583 41.5.10 Uploading Configuration File Via Console Port 584 ZyWALL 2 Plus User's Guide 21