User Guide
Page 16
.../Edit: WPA-PSK/WPA2-PSK Security 259 11.6.4 WLAN Add/Edit: WPA/WPA2 Security 260 11.7 WLAN Interface MAC Filter 262 11.8 VLAN Interfaces ...264 11.8.1 VLAN Summary Screen 266 11.8.2 VLAN Add/Edit ...267 11.9 Bridge Interfaces ...274 11.9.1 Bridge Summary ...276 11.9.2 Bridge Add/Edit ...277 11.9.3 Virtual Interfaces Add/Edit....2.1 Policy Route Edit Screen 303 13.3 IP Static Route Screen ...307 13.3.1 Static Route Add/Edit Screen 308 13.4 Policy Routing Technical Reference 309 16 ZyWALL USG 20/20W User's Guide
.../Edit: WPA-PSK/WPA2-PSK Security 259 11.6.4 WLAN Add/Edit: WPA/WPA2 Security 260 11.7 WLAN Interface MAC Filter 262 11.8 VLAN Interfaces ...264 11.8.1 VLAN Summary Screen 266 11.8.2 VLAN Add/Edit ...267 11.9 Bridge Interfaces ...274 11.9.1 Bridge Summary ...276 11.9.2 Bridge Add/Edit ...277 11.9.3 Virtual Interfaces Add/Edit....2.1 Policy Route Edit Screen 303 13.3 IP Static Route Screen ...307 13.3.1 Static Route Add/Edit Screen 308 13.4 Policy Routing Technical Reference 309 16 ZyWALL USG 20/20W User's Guide
User Guide
Page 49
... only) Configure settings for users and groups. Zone Configure zones used to set the ZyWALL's flexible ports as LAN1 or DMZ. ZyWALL USG 20/20W User's Guide 49 VLAN Create and manage VLAN interfaces and virtual VLAN interfaces. Static Route Create and manage IP static routing information. OSPF Configure device-level OSPF settings, including areas and virtual...
... only) Configure settings for users and groups. Zone Configure zones used to set the ZyWALL's flexible ports as LAN1 or DMZ. ZyWALL USG 20/20W User's Guide 49 VLAN Create and manage VLAN interfaces and virtual VLAN interfaces. Static Route Create and manage IP static routing information. OSPF Configure device-level OSPF settings, including areas and virtual...
User Guide
Page 88
... settings such as firewall, remote management. For a list of zones, interfaces, and physical ports in configuring other features. 88 ZyWALL USG 20/20W User's Guide Here is an overview of common objects, see Section 6.6 on page 53) to see what objects are...DDNS, policy routes, static routes, HTTP redirect, and NAT. Use the Object Reference screen (Section 3.3.3.3 on page 103. Interfaces (Ethernet, VLAN,...) Interfaces are configured and which configuration settings reference specific objects. 6.2 Zones, Interfaces, and Physical Ports Zones (groups of interfaces and VPN tunnels...
... settings such as firewall, remote management. For a list of zones, interfaces, and physical ports in configuring other features. 88 ZyWALL USG 20/20W User's Guide Here is an overview of common objects, see Section 6.6 on page 53) to see what objects are...DDNS, policy routes, static routes, HTTP redirect, and NAT. Use the Object Reference screen (Section 3.3.3.3 on page 103. Interfaces (Ethernet, VLAN,...) Interfaces are configured and which configuration settings reference specific objects. 6.2 Zones, Interfaces, and Physical Ports Zones (groups of interfaces and VPN tunnels...
User Guide
Page 89
... between physical ports at the layer-2 (data link, MAC address) level. The ZyWALL automatically adds or removes the tags as IP alias), virtual VLAN interfaces, and virtual bridge interfaces. ZyWALL USG 20/20W User's Guide 89 Chapter 6 Configuration Basics 6.2.1 Interface Types There are many types... of routing information in the ZyWALL. Then, you use the Interface > Port Roles...
... between physical ports at the layer-2 (data link, MAC address) level. The ZyWALL automatically adds or removes the tags as IP alias), virtual VLAN interfaces, and virtual bridge interfaces. ZyWALL USG 20/20W User's Guide 89 Chapter 6 Configuration Basics 6.2.1 Interface Types There are many types... of routing information in the ZyWALL. Then, you use the Interface > Port Roles...
User Guide
Page 96
...to myZyXEL.com 6.5.3 Interface See Section 6.2 on page 107. 6.5.5 Policy Routes Use policy routes to override the ZyWALL's default routing behavior in order to send packets through the appropriate interface or VPN tunnel. MENU ITEM(S) PREREQUISITES Configuration ...VLAN, and bridge interfaces. MENU ITEM(S) Configuration > Network > Interface > Trunk PREREQUISITES Interfaces WHERE USED Policy routes Example: See Chapter 7 on page 88 for bandwidth management (out of the features that use policy routes for background information. Most of the ZyWALL), port triggering, 96 ZyWALL USG 20...
...to myZyXEL.com 6.5.3 Interface See Section 6.2 on page 107. 6.5.5 Policy Routes Use policy routes to override the ZyWALL's default routing behavior in order to send packets through the appropriate interface or VPN tunnel. MENU ITEM(S) PREREQUISITES Configuration ...VLAN, and bridge interfaces. MENU ITEM(S) Configuration > Network > Interface > Trunk PREREQUISITES Interfaces WHERE USED Policy routes Example: See Chapter 7 on page 88 for bandwidth management (out of the features that use policy routes for background information. Most of the ZyWALL), port triggering, 96 ZyWALL USG 20...
User Guide
Page 182
... possible values depend on page 195 for the status that can appear. For virtual interfaces, this field displays the IP address it is enabled. For VLAN and bridge interfaces, this field always displays Up. Disconnected - Chapter 9 Monitor Table 28 Monitor > System Status > Interface Status (continued) LABEL DESCRIPTION Port Status This... interface does not have any services to the interface. This field displays the current IP address and subnet mask assigned to the network. 182 ZyWALL USG 20/20W User's Guide This is either the static IP address of each interface.
... possible values depend on page 195 for the status that can appear. For virtual interfaces, this field displays the IP address it is enabled. For VLAN and bridge interfaces, this field always displays Up. Disconnected - Chapter 9 Monitor Table 28 Monitor > System Status > Interface Status (continued) LABEL DESCRIPTION Port Status This... interface does not have any services to the interface. This field displays the current IP address and subnet mask assigned to the network. 182 ZyWALL USG 20/20W User's Guide This is either the static IP address of each interface.
User Guide
Page 184
... 30 on the number of records shown in the Traffic Statistics screen. Statistics Interface Select the interface from Ethernet, VLAN, bridge and PPPoE/PPTP interfaces. 184 ZyWALL USG 20/20W User's Guide you can collect information from which to collect information. Table 29 Monitor > System Status > ...page 186 for the report. Click Apply to save your changes back to the right. If the ZyWALL has already been collecting data, the collection period displays to the ZyWALL. Click Reset to return the screen to its last-saved settings. You cannot schedule data collection;...
... 30 on the number of records shown in the Traffic Statistics screen. Statistics Interface Select the interface from Ethernet, VLAN, bridge and PPPoE/PPTP interfaces. 184 ZyWALL USG 20/20W User's Guide you can collect information from which to collect information. Table 29 Monitor > System Status > ...page 186 for the report. Click Apply to save your changes back to the right. If the ZyWALL has already been collecting data, the collection period displays to the ZyWALL. Click Reset to return the screen to its last-saved settings. You cannot schedule data collection;...
User Guide
Page 217
...LAN1 interface. • Zones are groups of other interfaces and network policies. ZyWALL USG 20/20W User's Guide 217 An interface also describes a network that is directly connected to configure load balancing. VLAN interfaces receive and send tagged frames. You use them in these interfaces. ...the foundation for interfaces on a wireless LAN card. • Use the VLAN screens (Section 11.8 on top of Ethernet interfaces to tell the ZyWALL where to configure the ZyWALL's interfaces. Each VLAN can also create interfaces on top of interfaces used to ease security policy configuration...
...LAN1 interface. • Zones are groups of other interfaces and network policies. ZyWALL USG 20/20W User's Guide 217 An interface also describes a network that is directly connected to configure load balancing. VLAN interfaces receive and send tagged frames. You use them in these interfaces. ...the foundation for interfaces on a wireless LAN card. • Use the VLAN screens (Section 11.8 on top of Ethernet interfaces to tell the ZyWALL where to configure the ZyWALL's interfaces. Each VLAN can also create interfaces on top of interfaces used to ease security policy configuration...
User Guide
Page 218
... other interfaces and network policies. Types of Interfaces You can take advantage of interfaces--Ethernet, PPP, cellular, VLAN, bridge, and 218 ZyWALL USG 20/20W User's Guide You can belong to each type of interface). • An interface is a logical entity through which (layer-3) packets pass. • An interface ...
... other interfaces and network policies. Types of Interfaces You can take advantage of interfaces--Ethernet, PPP, cellular, VLAN, bridge, and 218 ZyWALL USG 20/20W User's Guide You can belong to each type of interface). • An interface is a logical entity through which (layer-3) packets pass. • An interface ...
User Guide
Page 219
...colon(:) in more detail below. Table 48 Relationships Between Different Types of similar characteristics. These characteristics are explained in the VLAN name field. For most interfaces, x is a sequential number. it is limited by the maximum number of the type ... port group Ethernet interface physical port physical port VLAN interface port group Ethernet interface ZyWALL USG 20/20W User's Guide 219 Table 47 Ethernet, PPP, Cellular, VLAN, Bridge, and Virtual Interface Characteristics CHARACTERISTICS ETHERNET ETHERNET PPP CELLU LAR VLAN BRIDGE VIRTUAL Name* wan1 lan1, lan2, pppx...
...colon(:) in more detail below. Table 48 Relationships Between Different Types of similar characteristics. These characteristics are explained in the VLAN name field. For most interfaces, x is a sequential number. it is limited by the maximum number of the type ... port group Ethernet interface physical port physical port VLAN interface port group Ethernet interface ZyWALL USG 20/20W User's Guide 219 Table 47 Ethernet, PPP, Cellular, VLAN, Bridge, and Virtual Interface Characteristics CHARACTERISTICS ETHERNET ETHERNET PPP CELLU LAR VLAN BRIDGE VIRTUAL Name* wan1 lan1, lan2, pppx...
User Guide
Page 220
... 6.2 on page 88 details on the differences between the physical 220 ZyWALL USG 20/20W User's Guide This creates a hardware connection between physical ports, interfaces, and zones in the ZyWALL. • See Section 6.5.3 on page 96 for related information about...WLAN interface* (USG20W only) PPP interface virtual interface VLAN interface* WAN1 (virtual Ethernet interface) (virtual VLAN interface) (virtual bridge interface) Ethernet interface* VLAN interface* bridge interface trunk Ethernet interface Cellular interface VLAN interface bridge interface PPP interface * - Use the ...
... 6.2 on page 88 details on the differences between the physical 220 ZyWALL USG 20/20W User's Guide This creates a hardware connection between physical ports, interfaces, and zones in the ZyWALL. • See Section 6.5.3 on page 96 for related information about...WLAN interface* (USG20W only) PPP interface virtual interface VLAN interface* WAN1 (virtual Ethernet interface) (virtual VLAN interface) (virtual bridge interface) Ethernet interface* VLAN interface* bridge interface trunk Ethernet interface Cellular interface VLAN interface bridge interface PPP interface * - Use the ...
User Guide
Page 264
...identification number (ID). Figure 174 Example: Before VLAN A B C In this example, there are connected to the router. (If one switch has enough connections for the entire network, the network does not need switches A and B.) 264 ZyWALL USG 20/20W User's Guide Alternatively, you can divide... the physical networks into multiple logical networks. The VLANs are connected to switches, and the switches are connected to the router. Figure 175...
...identification number (ID). Figure 174 Example: Before VLAN A B C In this example, there are connected to the router. (If one switch has enough connections for the entire network, the network does not need switches A and B.) 264 ZyWALL USG 20/20W User's Guide Alternatively, you can divide... the physical networks into multiple logical networks. The VLANs are connected to switches, and the switches are connected to the router. Figure 175...
User Guide
Page 265
... restrict bandwidth and packet size. For example, you can align network policies more VLAN interfaces. VLAN Interfaces Overview In the ZyWALL, each VLAN is layer-2 communication (data link layer, MAC addresses). You can create different content filtering rules for users. ZyWALL USG 20/20W User's Guide 265 These rules are limited to other interfaces in another type...
... restrict bandwidth and packet size. For example, you can align network policies more VLAN interfaces. VLAN Interfaces Overview In the ZyWALL, each VLAN is layer-2 communication (data link layer, MAC addresses). You can create different content filtering rules for users. ZyWALL USG 20/20W User's Guide 265 These rules are limited to other interfaces in another type...
User Guide
Page 266
...create a virtual interface, select an interface and click Create Virtual Interface. To turn on top of VLAN interfaces. IP addresses are always static in dot decimal notation. 266 ZyWALL USG 20/20W User's Guide Name This field displays the name of the interface. To remove an entry, select... it and click Inactivate. To turn off an entry, select it and click Remove. Figure 176 Configuration > Network > Interface > VLAN Each field is inactive....
...create a virtual interface, select an interface and click Create Virtual Interface. To turn on top of VLAN interfaces. IP addresses are always static in dot decimal notation. 266 ZyWALL USG 20/20W User's Guide Name This field displays the name of the interface. To remove an entry, select... it and click Inactivate. To turn off an entry, select it and click Remove. Figure 176 Configuration > Network > Interface > VLAN Each field is inactive....
User Guide
Page 267
... address assignment, interface bandwidth parameters, DHCP settings, and connectivity check for each VLAN interface. Click Reset to return the screen to a VLAN interface in the VLAN Summary screen. ZyWALL USG 20/20W User's Guide 267 Chapter 11 Interfaces Table 65 Configuration > Network > Interface > VLAN (continued) LABEL DESCRIPTION Apply Reset Click Apply to save your changes back to...
... address assignment, interface bandwidth parameters, DHCP settings, and connectivity check for each VLAN interface. Click Reset to return the screen to a VLAN interface in the VLAN Summary screen. ZyWALL USG 20/20W User's Guide 267 Chapter 11 Interfaces Table 65 Configuration > Network > Interface > VLAN (continued) LABEL DESCRIPTION Apply Reset Click Apply to save your changes back to...
User Guide
Page 268
Chapter 11 Interfaces Figure 177 Configuration > Network > Interface > VLAN > Edit 268 ZyWALL USG 20/20W User's Guide
Chapter 11 Interfaces Figure 177 Configuration > Network > Interface > VLAN > Edit 268 ZyWALL USG 20/20W User's Guide
User Guide
Page 269
... gateway. Enter the IP address of the IP address is the same for all computers in the network. ZyWALL USG 20/20W User's Guide 269 Table 66 Configuration > Network > Interface > VLAN > Edit LABEL DESCRIPTION Show Advance Settings / Hide Advance Settings General Settings Enable Interface Interface Properties Interface Name ... when it can be on the ZyWALL. You can use a number from 0~4094. Select this interface on page 741 the User's Guide for this interface in the following table. Gateway Enter the subnet mask of the VLAN interface. Enter the VLAN ID. This field is enabled if...
... gateway. Enter the IP address of the IP address is the same for all computers in the network. ZyWALL USG 20/20W User's Guide 269 Table 66 Configuration > Network > Interface > VLAN > Edit LABEL DESCRIPTION Show Advance Settings / Hide Advance Settings General Settings Enable Interface Interface Properties Interface Name ... when it can be on the ZyWALL. You can use a number from 0~4094. Select this interface on page 741 the User's Guide for this interface in the following table. Gateway Enter the subnet mask of the VLAN interface. Enter the VLAN ID. This field is enabled if...
User Guide
Page 270
... Specify the port number to use the default gateway for the OPT, LAN and DMZ interfaces. 270 ZyWALL USG 20/20W User's Guide MTU Maximum Transmission Unit. The ZyWALL resumes routing to wait for a TCP connectivity check. Check Timeout Enter the number of seconds to the...the attempt is 1500. Gateway Check this address Check Port Select this priority. Chapter 11 Interfaces Table 66 Configuration > Network > Interface > VLAN > Edit (continued) LABEL DESCRIPTION Metric Enter the priority of the gateway (if any) on the connection check. Check Method Select the ...
... Specify the port number to use the default gateway for the OPT, LAN and DMZ interfaces. 270 ZyWALL USG 20/20W User's Guide MTU Maximum Transmission Unit. The ZyWALL resumes routing to wait for a TCP connectivity check. Check Timeout Enter the number of seconds to the...the attempt is 1500. Gateway Check this address Check Port Select this priority. Chapter 11 Interfaces Table 66 Configuration > Network > Interface > VLAN > Edit (continued) LABEL DESCRIPTION Metric Enter the priority of the gateway (if any) on the connection check. Check Method Select the ...
User Guide
Page 271
Chapter 11 Interfaces Table 66 Configuration > Network > Interface > VLAN > Edit (continued) LABEL DESCRIPTION DHCP Select what type of another DHCP server for the network. The DHCP server(s) may be blank. Enter the IP address of DHCP service the ZyWALL provides to the network. If this field is a DHCP...is already a DHCP server on your network and the IP addresses that they are : None - ZyWALL USG 20/20W User's Guide 271 The ZyWALL is a DHCP Server. These fields appear if the ZyWALL is the DHCP server for the DHCP clients to the network. select the DNS server that you ...
Chapter 11 Interfaces Table 66 Configuration > Network > Interface > VLAN > Edit (continued) LABEL DESCRIPTION DHCP Select what type of another DHCP server for the network. The DHCP server(s) may be blank. Enter the IP address of DHCP service the ZyWALL provides to the network. If this field is a DHCP...is already a DHCP server on your network and the IP addresses that they are : None - ZyWALL USG 20/20W User's Guide 271 The ZyWALL is a DHCP Server. These fields appear if the ZyWALL is the DHCP server for the DHCP clients to the network. select the DNS server that you ...
User Guide
Page 272
... entry and click this interface. Select the RIP version(s) used for this to create a new entry. otherwise, the ZyWALL uses multicasting. 272 ZyWALL USG 20/20W User's Guide Chapter 11 Interfaces Table 66 Configuration > Network > Interface > VLAN > Edit (continued) LABEL DESCRIPTION Lease time Specify how long each computer can be able to modify it. Static...
... entry and click this interface. Select the RIP version(s) used for this to create a new entry. otherwise, the ZyWALL uses multicasting. 272 ZyWALL USG 20/20W User's Guide Chapter 11 Interfaces Table 66 Configuration > Network > Interface > VLAN > Edit (continued) LABEL DESCRIPTION Lease time Specify how long each computer can be able to modify it. Static...