User Guide
Page 3
...the PDF file. E-mail techwriters@zyxel.com.tw if you cannot find specific information in this guide, use the Command-Line Interface (CLI) to configure the ZyWALL. Related Documentation • Quick ...It is recommended you use that menu item. • To find the information you require. ZyWALL USG 20/20W User's Guide 3 About This User's Guide About This User's Guide Intended Audience This ...components, icons and menus in the ZyWALL Web Configurator. • Read Chapter 4 on page 59 if you're using the installation wizard for first time setup and you want more detailed information...
...the PDF file. E-mail techwriters@zyxel.com.tw if you cannot find specific information in this guide, use the Command-Line Interface (CLI) to configure the ZyWALL. Related Documentation • Quick ...It is recommended you use that menu item. • To find the information you require. ZyWALL USG 20/20W User's Guide 3 About This User's Guide About This User's Guide Intended Audience This ...components, icons and menus in the ZyWALL Web Configurator. • Read Chapter 4 on page 59 if you're using the installation wizard for first time setup and you want more detailed information...
User Guide
Page 9
Contents Overview Contents Overview User's Guide ...27 Introducing the ZyWALL ...29 Features and Applications ...37 Web Configurator ...43 Installation Setup Wizard ...59 Quick Setup ...69 Configuration Basics ...87 Tutorials ...107 Technical Reference ...163 Dashboard ...165 Monitor ...177 ...SSL VPN ...427 SSL User Screens ...437 SSL User Application Screens 447 ZyWALL SecuExtender ...449 Bandwidth Management ...453 ADP ...467 Content Filtering ...487 Content Filter Reports ...513 Anti-Spam ...521 User/Group ...539 Addresses ...555 Services ...561 ZyWALL USG 20/20W User's Guide 9
Contents Overview Contents Overview User's Guide ...27 Introducing the ZyWALL ...29 Features and Applications ...37 Web Configurator ...43 Installation Setup Wizard ...59 Quick Setup ...69 Configuration Basics ...87 Tutorials ...107 Technical Reference ...163 Dashboard ...165 Monitor ...177 ...SSL VPN ...427 SSL User Screens ...437 SSL User Application Screens 447 ZyWALL SecuExtender ...449 Bandwidth Management ...453 ADP ...467 Content Filtering ...487 Content Filter Reports ...513 Anti-Spam ...521 User/Group ...539 Addresses ...555 Services ...561 ZyWALL USG 20/20W User's Guide 9
User Guide
Page 12
...6.4.2 NAT Table Checking Flow 94 6.5 Feature Configuration Overview 95 12 ZyWALL USG 20/20W User's Guide Finish 65 4.2 Device Registration ...65 Chapter 5 Quick Setup ...69 5.1 Quick Setup Overview ...69 5.2 WAN Interface Quick Setup 70 5.2.1 Choose an Ethernet Interface 70 5.2.2 Select WAN Type ......70 5.2.3 Configure WAN Settings 71 5.2.4 WAN and ISP Connection Settings 72 5.2.5 Quick Setup Interface Wizard: Summary 74 5.3 VPN Quick Setup ...75 5.4 VPN Setup Wizard: Wizard Type 76 5.5 VPN Express Wizard - Configuration 78 5.5.2 VPN Express Wizard - Finish 80 ...
...6.4.2 NAT Table Checking Flow 94 6.5 Feature Configuration Overview 95 12 ZyWALL USG 20/20W User's Guide Finish 65 4.2 Device Registration ...65 Chapter 5 Quick Setup ...69 5.1 Quick Setup Overview ...69 5.2 WAN Interface Quick Setup 70 5.2.1 Choose an Ethernet Interface 70 5.2.2 Select WAN Type ......70 5.2.3 Configure WAN Settings 71 5.2.4 WAN and ISP Connection Settings 72 5.2.5 Quick Setup Interface Wizard: Summary 74 5.3 VPN Quick Setup ...75 5.4 VPN Setup Wizard: Wizard Type 76 5.5 VPN Express Wizard - Configuration 78 5.5.2 VPN Express Wizard - Finish 80 ...
User Guide
Page 14
... Rule 138 7.11 How to Use an IPPBX on the DMZ 139 7.11.1 Turn On the ALG ...141 7.11.2 Create the Address Objects 141 7.11.3 Setup a NAT Policy for the IPPBX 142 7.11.4 Set Up a WAN to DMZ Firewall Rule for SIP 143 7.11.5 Set Up a DMZ to LAN Firewall Rule... 8.1 Overview ...165 8.1.1 What You Can Do in this Chapter 165 8.2 The Dashboard Screen ...165 8.2.1 The CPU Usage Screen 171 8.2.2 The Memory Usage Screen 172 14 ZyWALL USG 20/20W User's Guide
... Rule 138 7.11 How to Use an IPPBX on the DMZ 139 7.11.1 Turn On the ALG ...141 7.11.2 Create the Address Objects 141 7.11.3 Setup a NAT Policy for the IPPBX 142 7.11.4 Set Up a WAN to DMZ Firewall Rule for SIP 143 7.11.5 Set Up a DMZ to LAN Firewall Rule... 8.1 Overview ...165 8.1.1 What You Can Do in this Chapter 165 8.2 The Dashboard Screen ...165 8.2.1 The CPU Usage Screen 171 8.2.2 The Memory Usage Screen 172 14 ZyWALL USG 20/20W User's Guide
User Guide
Page 33
...) The CLI allows you to use the following ways to manage the ZyWALL. Web Configurator The Web Configurator allows easy ZyWALL setup and management using remote management (for example, SSH or Telnet) or via the ZyWALL USG 20/20W User's Guide 33 Blinking The ZyWALL is no connection on this port. On A 3G USB card or a USB...
...) The CLI allows you to use the following ways to manage the ZyWALL. Web Configurator The Web Configurator allows easy ZyWALL setup and management using remote management (for example, SSH or Telnet) or via the ZyWALL USG 20/20W User's Guide 33 Blinking The ZyWALL is no connection on this port. On A 3G USB card or a USB...
User Guide
Page 43
CHAPTER 3 Web Configurator The ZyWALL Web Configurator allows easy ZyWALL setup and management using an Internet browser. 3.1 Web Configurator Requirements In order to use the Web Configurator, you must • Use Internet Explorer 7 or later, or ... default) • Enable Java permissions (enabled by default) • Enable cookies The recommended screen resolution is 1024 x 768 pixels. 3.2 Web Configurator Access 1 Make sure your ZyWALL hardware is properly connected. See the Quick Start Guide. ZyWALL USG 20/20W User's Guide 43
CHAPTER 3 Web Configurator The ZyWALL Web Configurator allows easy ZyWALL setup and management using an Internet browser. 3.1 Web Configurator Requirements In order to use the Web Configurator, you must • Use Internet Explorer 7 or later, or ... default) • Enable Java permissions (enabled by default) • Enable cookies The recommended screen resolution is 1024 x 768 pixels. 3.2 Web Configurator Access 1 Make sure your ZyWALL hardware is properly connected. See the Quick Start Guide. ZyWALL USG 20/20W User's Guide 43
User Guide
Page 45
..., this screen. Figure 8 Dashboard B A C 3.3 Web Configurator Screens Overview The Web Configurator screen is using the default user name and default password. main window ZyWALL USG 20/20W User's Guide 45 If you click Apply. Follow the directions in Figure 8 on page 59); If you log in using its default configuration (see... this screen does not appear anymore. title bar • B - Chapter 3 Web Configurator 5 The screen above appears every time you click Ignore, the Installation Setup Wizard opens if the ZyWALL is divided into these parts (as shown next.
..., this screen. Figure 8 Dashboard B A C 3.3 Web Configurator Screens Overview The Web Configurator screen is using the default user name and default password. main window ZyWALL USG 20/20W User's Guide 45 If you click Apply. Follow the directions in Figure 8 on page 59); If you log in using its default configuration (see... this screen does not appear anymore. title bar • B - Chapter 3 Web Configurator 5 The screen above appears every time you click Ignore, the Installation Setup Wizard opens if the ZyWALL is divided into these parts (as shown next.
User Guide
Page 48
...service status and upgrade licensed services. 48 ZyWALL USG 20/20W User's Guide Interface Status Displays general interface information and packet statistics. Table 7 Configuration Menu Screens Summary FOLDER OR LINK TAB FUNCTION Quick Setup Quickly configure WAN interfaces or VPN connections.... Port Statistics Displays packet statistics for each physical port. Session Monitor Displays the status of the ZyWALL's wireless clients. WLAN Status (For USG 20W only) Displays the connection status of all current sessions. Anti-X Statistics Content Filter Report...
...service status and upgrade licensed services. 48 ZyWALL USG 20/20W User's Guide Interface Status Displays general interface information and packet statistics. Table 7 Configuration Menu Screens Summary FOLDER OR LINK TAB FUNCTION Quick Setup Quickly configure WAN interfaces or VPN connections.... Port Statistics Displays packet statistics for each physical port. Session Monitor Displays the status of the ZyWALL's wireless clients. WLAN Status (For USG 20W only) Displays the connection status of all current sessions. Anti-X Statistics Content Filter Report...
User Guide
Page 59
... Screens If you configure Internet connection settings and activate subscription services. This chapter provides information on configuring the Web Configurator's installation setup wizard. ZyWALL USG 20/20W User's Guide 59 Figure 23 Installation Setup Wizard • Click the double arrow in this screen to start configuring for background information. See the feature-specific chapters in...
... Screens If you configure Internet connection settings and activate subscription services. This chapter provides information on configuring the Web Configurator's installation setup wizard. ZyWALL USG 20/20W User's Guide 59 Figure 23 Installation Setup Wizard • Click the double arrow in this screen to start configuring for background information. See the feature-specific chapters in...
User Guide
Page 60
... WAN Interface: This is the number of Internet connection you are configuring for a dial-up connection according to you don't have that will belong. 60 ZyWALL USG 20/20W User's Guide Leave a field blank if you . Figure 25 Internet Access: Ethernet Encapsulation • Encapsulation: This displays the type of the interface that ...set the previous screen's IP Address Assignment field to configure your ISP. • WAN Interface: This is the interface you a fixed IP address. Chapter 4 Installation Setup Wizard The screens vary depending on the encapsulation type.
... WAN Interface: This is the number of Internet connection you are configuring for a dial-up connection according to you don't have that will belong. 60 ZyWALL USG 20/20W User's Guide Leave a field blank if you . Figure 25 Internet Access: Ethernet Encapsulation • Encapsulation: This displays the type of the interface that ...set the previous screen's IP Address Assignment field to configure your ISP. • WAN Interface: This is the interface you a fixed IP address. Chapter 4 Installation Setup Wizard The screens vary depending on the encapsulation type.
User Guide
Page 61
Enter a DNS server's IP address(es). Options are: ZyWALL USG 20/20W User's Guide 61 Leave the field as 0.0.0.0 if ... (DNS) maps a domain name to resolve domain names for VPN, DDNS and the time server. The ZyWALL uses these (in the previous screen. Figure 26 Internet Access: PPPoE Encapsulation 4.1.3.1 ISP Parameters • Type...is extremely important because without it . Auto displays if you selected static IP address assignment. Chapter 4 Installation Setup Wizard • IP Address: Enter your (static) public IP address. The following fields display if you selected...
Enter a DNS server's IP address(es). Options are: ZyWALL USG 20/20W User's Guide 61 Leave the field as 0.0.0.0 if ... (DNS) maps a domain name to resolve domain names for VPN, DDNS and the time server. The ZyWALL uses these (in the previous screen. Figure 26 Internet Access: PPPoE Encapsulation 4.1.3.1 ISP Parameters • Type...is extremely important because without it . Auto displays if you selected static IP address assignment. Chapter 4 Installation Setup Wizard • IP Address: Enter your (static) public IP address. The following fields display if you selected...
User Guide
Page 62
... not want the connection to access it can be up to an IP address and vice versa. The ZyWALL uses these (in order to time out. Chapter 4 Installation Setup Wizard • CHAP/PAP - Your ZyWALL accepts CHAP only. • PAP - Leave the field as the IP Address Assignment in seconds that... you selected static IP address assignment. Auto displays if you selected Auto as 0.0.0.0 if you can use alphanumeric and _@$./ characters, and it . 62 ZyWALL USG 20/20W User's Guide The DNS server is the security zone to resolve domain names for VPN, DDNS and the time server. Your...
... not want the connection to access it can be up to an IP address and vice versa. The ZyWALL uses these (in order to time out. Chapter 4 Installation Setup Wizard • CHAP/PAP - Your ZyWALL accepts CHAP only. • PAP - Leave the field as the IP Address Assignment in seconds that... you selected static IP address assignment. Auto displays if you selected Auto as 0.0.0.0 if you can use alphanumeric and _@$./ characters, and it . 62 ZyWALL USG 20/20W User's Guide The DNS server is the security zone to resolve domain names for VPN, DDNS and the time server. Your...
User Guide
Page 63
...ZyWALL USG 20/20W User's Guide 63 Your ZyWALL accepts PAP only. • MSCHAP - Your ZyWALL accepts MSCHAP only. • MSCHAP-V2 - Your ZyWALL accepts MSCHAP-V2 only. • Type the User Name given to you by your ISP. Use up to confirm it can be up to 64 ASCII characters except the [] and ?. Chapter 4 Installation Setup...the next field to 31 characters long. • Type the Password associated with the user name. Your ZyWALL accepts CHAP only. • PAP - This field can be blank. Figure 27 Internet Access: PPTP Encapsulation 4.1.5 ISP Parameters ...
...ZyWALL USG 20/20W User's Guide 63 Your ZyWALL accepts PAP only. • MSCHAP - Your ZyWALL accepts MSCHAP only. • MSCHAP-V2 - Your ZyWALL accepts MSCHAP-V2 only. • Type the User Name given to you by your ISP. Use up to confirm it can be up to 64 ASCII characters except the [] and ?. Chapter 4 Installation Setup...the next field to 31 characters long. • Type the Password associated with the user name. Your ZyWALL accepts CHAP only. • PAP - This field can be blank. Figure 27 Internet Access: PPTP Encapsulation 4.1.5 ISP Parameters ...
User Guide
Page 64
...; IP Address: Enter your ISP. • Type the IP Subnet Mask assigned to resolve domain names for VPN, DDNS and the time server. The ZyWALL uses these (in the order you specify here) to you by your (static) public IP address. For example, C:12 or N:My ISP. Auto ... important because without it, you must follow the "c:id" and "n:name" format. Chapter 4 Installation Setup Wizard • Select Nailed-Up if you do not want the connection to configure DNS servers. 64 ZyWALL USG 20/20W User's Guide Enter a DNS server's IP address(es). The DNS server is optional and depends...
...; IP Address: Enter your ISP. • Type the IP Subnet Mask assigned to resolve domain names for VPN, DDNS and the time server. The ZyWALL uses these (in the order you specify here) to you by your (static) public IP address. For example, C:12 or N:My ISP. Auto ... important because without it, you must follow the "c:id" and "n:name" format. Chapter 4 Installation Setup Wizard • Select Nailed-Up if you do not want the connection to configure DNS servers. 64 ZyWALL USG 20/20W User's Guide Enter a DNS server's IP address(es). The DNS server is optional and depends...
User Guide
Page 65
...connected to the Internet to perform a basic registration (see Section 4.2 on page 65). ZyWALL USG 20/20W User's Guide 65 If you want to do a more detailed registration or manage your ZyWALL to access the Internet. Click Next and use the following screen to register. Finish You ..., you have not already done so. Chapter 4 Installation Setup Wizard 4.1.6 Internet Access - Figure 28 Internet Access: Ethernet Encapsulation Note: If you can still activate any ). Alternatively, close the window to register your ZyWALL with myZXEL.com and activate trial periods of services like ...
...connected to the Internet to perform a basic registration (see Section 4.2 on page 65). ZyWALL USG 20/20W User's Guide 65 If you want to do a more detailed registration or manage your ZyWALL to access the Internet. Click Next and use the following screen to register. Finish You ..., you have not already done so. Chapter 4 Installation Setup Wizard 4.1.6 Internet Access - Figure 28 Internet Access: Ethernet Encapsulation Note: If you can still activate any ). Alternatively, close the window to register your ZyWALL with myZXEL.com and activate trial periods of services like ...
User Guide
Page 66
... characters (and the underscore). Spaces are not allowed. Chapter 4 Installation Setup Wizard Use the Registration > Service screen to 20 alphanumeric characters (and the underscore). Use from the drop-down box list. 66 ZyWALL USG 20/20W User's Guide Spaces are not allowed. Type it is available. • Password: Use six to verify that it again...
... characters (and the underscore). Spaces are not allowed. Chapter 4 Installation Setup Wizard Use the Registration > Service screen to 20 alphanumeric characters (and the underscore). Use from the drop-down box list. 66 ZyWALL USG 20/20W User's Guide Spaces are not allowed. Type it is available. • Password: Use six to verify that it again...
User Guide
Page 67
Figure 30 Registraton: Registered Device ZyWALL USG 20/20W User's Guide 67 Chapter 4 Installation Setup Wizard • Trial Service Activation: You can buy an iCard and enter the license key in the Registration > Service screen to extend the service. The trial period starts the day you can try a trial service subscription. After the trial expires, you activate the trial.
Figure 30 Registraton: Registered Device ZyWALL USG 20/20W User's Guide 67 Chapter 4 Installation Setup Wizard • Trial Service Activation: You can buy an iCard and enter the license key in the Registration > Service screen to extend the service. The trial period starts the day you can try a trial service subscription. After the trial expires, you activate the trial.
User Guide
Page 69
... Web Configurator, click Configuration > Quick Setup to open a wizard to open the first Quick Setup screen. This chapter provides information on configuring the quick setup screens in the ZyWALL if you configure Internet and VPN connection settings. ZyWALL USG 20/20W User's Guide 69 See the ...feature-specific chapters in this link to set up a WAN (Internet) connection. Figure 31 Quick Setup • WAN Interface Click...
... Web Configurator, click Configuration > Quick Setup to open a wizard to open the first Quick Setup screen. This chapter provides information on configuring the quick setup screens in the ZyWALL if you configure Internet and VPN connection settings. ZyWALL USG 20/20W User's Guide 69 See the ...feature-specific chapters in this link to set up a WAN (Internet) connection. Figure 31 Quick Setup • WAN Interface Click...
User Guide
Page 70
...Select the Ethernet interface that you want to open the WAN Interface Quick Setup Wizard Welcome screen. Chapter 5 Quick Setup 5.2 WAN Interface Quick Setup Click WAN Interface in the main Quick Setup screen to configure for a WAN connection and click Next. Choose Ethernet ...when the WAN port is to the internet. Click Next. Figure 33 Choose an Ethernet Interface 5.2.2 Select WAN Type WAN Type Selection: Select the type of encapsulation this connection is used as a regular Ethernet. 70 ZyWALL USG 20...
...Select the Ethernet interface that you want to open the WAN Interface Quick Setup Wizard Welcome screen. Chapter 5 Quick Setup 5.2 WAN Interface Quick Setup Click WAN Interface in the main Quick Setup screen to configure for a WAN connection and click Next. Choose Ethernet ...when the WAN port is to the internet. Click Next. Figure 33 Choose an Ethernet Interface 5.2.2 Select WAN Type WAN Type Selection: Select the type of encapsulation this connection is used as a regular Ethernet. 70 ZyWALL USG 20...