User Guide
Page 5
...book may differ slightly from others who use ZyXEL products and share your experiences as well. See http://www.zyxel.com/web/contact_us.php for the region in operating systems, operating system versions, or if you bought the device. ZyWALL USG 20/20W User's Guide 5 About This User's... Guide • Forum This contains discussions on ZyXEL products. Every effort has been made to ensure that you took to differences in which you installed updated firmware/software for your vendor. If you...
...book may differ slightly from others who use ZyXEL products and share your experiences as well. See http://www.zyxel.com/web/contact_us.php for the region in operating systems, operating system versions, or if you bought the device. ZyWALL USG 20/20W User's Guide 5 About This User's... Guide • Forum This contains discussions on ZyXEL products. Every effort has been made to ensure that you took to differences in which you installed updated firmware/software for your vendor. If you...
User Guide
Page 25
... ...693 45.1.1 What You Can Do in this Chapter 693 45.1.2 What you Need to Know 693 45.2 The Configuration File Screen 696 45.3 The Firmware Package Screen 700 45.4 The Shell Script Screen 702 Chapter 46 Diagnostics...705 46.1 Overview ...705 46.1.1 What You Can Do in this Chapter 705... Screen 719 Chapter 48 Reboot...723 48.1 Overview ...723 48.1.1 What You Need To Know 723 48.2 The Reboot Screen ...723 Chapter 49 Shutdown...725 ZyWALL USG 20/20W User's Guide 25
... ...693 45.1.1 What You Can Do in this Chapter 693 45.1.2 What you Need to Know 693 45.2 The Configuration File Screen 696 45.3 The Firmware Package Screen 700 45.4 The Shell Script Screen 702 Chapter 46 Diagnostics...705 46.1 Overview ...705 46.1.1 What You Can Do in this Chapter 705... Screen 719 Chapter 48 Reboot...723 48.1 Overview ...723 48.1.1 What You Need To Know 723 48.2 The Reboot Screen ...723 Chapter 49 Shutdown...725 ZyWALL USG 20/20W User's Guide 25
User Guide
Page 34
...can cause the firmware to start . The default settings for more information about the CLI. The ZyWALL powers up again) occurs when you use Maintenance > Shutdown > Shutdown or the shutdown command before you press the RESET button, the ZyWALL sets the configuration to the ZyWALL. Always use ...you turn on the power to its default values and then reboots. 34 ZyWALL USG 20/20W User's Guide Chapter 1 Introducing the ZyWALL console port. Not doing so can use the reboot command. Rebooting the ZyWALL Using the RESET button A warm start occurs when you use the console port...
...can cause the firmware to start . The default settings for more information about the CLI. The ZyWALL powers up again) occurs when you use Maintenance > Shutdown > Shutdown or the shutdown command before you press the RESET button, the ZyWALL sets the configuration to the ZyWALL. Always use ...you turn on the power to its default values and then reboots. 34 ZyWALL USG 20/20W User's Guide Chapter 1 Introducing the ZyWALL console port. Not doing so can use the reboot command. Rebooting the ZyWALL Using the RESET button A warm start occurs when you use the console port...
User Guide
Page 47
... Panel Use the menu items on the dashboard. ZyWALL USG 20/20W User's Guide 47 Chapter 3 Web Configurator The following sections introduce the ZyWALL's navigation panel menus and their screens. Released Date This shows the date (yyyy-mm-dd) and time (hh:mm:ss) when the firmware is released. Figure 11 Navigation Panel 3.3.2.1 Dashboard The...
... Panel Use the menu items on the dashboard. ZyWALL USG 20/20W User's Guide 47 Chapter 3 Web Configurator The following sections introduce the ZyWALL's navigation panel menus and their screens. Released Date This shows the date (yyyy-mm-dd) and time (hh:mm:ss) when the firmware is released. Figure 11 Navigation Panel 3.3.2.1 Dashboard The...
User Guide
Page 51
... look. Firmware Package View the current firmware version and to send. Shell Script Manage and run diagnostics, and reboot or shut down the ZyWALL. Language Select the Web Configurator language. USB Storage Configure the settings for the ZyWALL. SSH Configure SSH server and SSH service settings. SNMP Configure SNMP communities and services. ZyWALL USG 20/20W User...
... look. Firmware Package View the current firmware version and to send. Shell Script Manage and run diagnostics, and reboot or shut down the ZyWALL. Language Select the Web Configurator language. USB Storage Configure the settings for the ZyWALL. SSH Configure SSH server and SSH service settings. SNMP Configure SNMP communities and services. ZyWALL USG 20/20W User...
User Guide
Page 106
... to become corrupt. You can generate a file containing the ZyWALL's configuration and diagnostic information. You can cause the firmware to back up and restore the complete configuration of the ZyWALL. Always use Maintenance > Shutdown > Shutdown or the shutdown ...the power. MENU ITEM(S) Maintenance > File Manager 6.7.4 Diagnostics The ZyWALL can manage • Configuration files. It can analyze them without restarting. • Shell scripts. MENU ITEM(S) Maintenance > Shutdown 106 ZyWALL USG 20/20W User's Guide Chapter 6 Configuration Basics 6.7.3 File Manager Use these...
... to become corrupt. You can generate a file containing the ZyWALL's configuration and diagnostic information. You can cause the firmware to back up and restore the complete configuration of the ZyWALL. Always use Maintenance > Shutdown > Shutdown or the shutdown ...the power. MENU ITEM(S) Maintenance > File Manager 6.7.4 Diagnostics The ZyWALL can manage • Configuration files. It can analyze them without restarting. • Shell scripts. MENU ITEM(S) Maintenance > Shutdown 106 ZyWALL USG 20/20W User's Guide Chapter 6 Configuration Basics 6.7.3 File Manager Use these...
User Guide
Page 168
... IP address of this to open the screen where you can change it. Click the icon to look at the VPN tunnels that can upload firmware. Serial Number This field displays the serial number of the interface (if it is the master) or the management IP address (if it is a backup... only) The status for the status that are currently established. For cellular (3G) interfaces, see Section 11.5 on page 171. 168 ZyWALL USG 20/20W User's Guide If the interface is a member of this field displays the IP address it or the Ethernet interface is detected). Model Name This ...
... IP address of this to open the screen where you can change it. Click the icon to look at the VPN tunnels that can upload firmware. Serial Number This field displays the serial number of the interface (if it is the master) or the management IP address (if it is a backup... only) The status for the status that are currently established. For cellular (3G) interfaces, see Section 11.5 on page 171. 168 ZyWALL USG 20/20W User's Guide If the interface is a member of this field displays the IP address it or the Ethernet interface is detected). Model Name This ...
User Guide
Page 169
... display a chart of users currently logged in to the Login Users ZyWALL. ZyWALL USG 20/20W User's Guide 169 See Chapter 33 on page 175. Click the icon to pop-open on page 174. Problematic configuration after a firmware upgrade. System default configuration - Fallback to system default configuration - Fallback... Hover your cursor over this to look at the IP addresses currently assigned to see details about the ZyWALL's startup state. A firmware update was unable to apply the startup-config.conf configuration file and fell back to the lastgood.conf configuration file....
... display a chart of users currently logged in to the Login Users ZyWALL. ZyWALL USG 20/20W User's Guide 169 See Chapter 33 on page 175. Click the icon to pop-open on page 174. Problematic configuration after a firmware upgrade. System default configuration - Fallback to system default configuration - Fallback... Hover your cursor over this to look at the IP addresses currently assigned to see details about the ZyWALL's startup state. A firmware update was unable to apply the startup-config.conf configuration file and fell back to the lastgood.conf configuration file....
User Guide
Page 195
...the bill has not been paid or the account has expired. This is a 15-digit code that identifies the 3G device. Device Firmware This shows the software version of the signal. IMSI (International Mobile Subscriber Identity) is the Signal Quality measured in dBm. Service Provider...cellular card is a 15-digit code in decimal format that produced the 3G device. Figure 146 Monitor > System Status > USB Storage ZyWALL USG 20/20W User's Guide 195 Device Model This field displays the model name of the company that identifies the 3G device. Device Manufacturer This ...
...the bill has not been paid or the account has expired. This is a 15-digit code that identifies the 3G device. Device Firmware This shows the software version of the signal. IMSI (International Mobile Subscriber Identity) is the Signal Quality measured in dBm. Service Provider...cellular card is a 15-digit code in decimal format that produced the 3G device. Figure 146 Monitor > System Status > USB Storage ZyWALL USG 20/20W User's Guide 195 Device Model This field displays the model name of the company that identifies the 3G device. Device Manufacturer This ...
User Guide
Page 467
...firmware. Requests for abnormal behavior or events such as port scans. 29.1.1 ADP 1 ADP anomaly detection is in this Chapter • Use Anti-X > ADP > General (Section 29.2 on page 469) to turn anomaly detection on or off and apply anomaly profiles to a traffic direction. ZyWALL USG 20/... packets that do not comply with the relevant RFC (Request For Comments). Protocol Anomalies Protocol anomalies are updated when you upload new firmware. CHAPTER 29 ADP 29.1 Overview This chapter introduces ADP (Anomaly Detection and Prevention), anomaly profiles and applying an ADP profile to ...
...firmware. Requests for abnormal behavior or events such as port scans. 29.1.1 ADP 1 ADP anomaly detection is in this Chapter • Use Anti-X > ADP > General (Section 29.2 on page 469) to turn anomaly detection on or off and apply anomaly profiles to a traffic direction. ZyWALL USG 20/... packets that do not comply with the relevant RFC (Request For Comments). Protocol Anomalies Protocol anomalies are updated when you upload new firmware. CHAPTER 29 ADP 29.1 Overview This chapter introduces ADP (Anomaly Detection and Prevention), anomaly profiles and applying an ADP profile to ...
User Guide
Page 475
Action This is the action the ZyWALL should take the configured action. Threshold OK Cancel Save For flood detection you upload new firmware. 29.3.6 Protocol Anomaly Configuration In the Configuration > Anti-X > ADP > Profile screen, click the Edit icon or click the Add icon and choose a base ... to other screens belonging to this profile, make sure you have clicked OK or Save to save your settings to the ZyWALL, complete the profile and return to complete the profile. ZyWALL USG 20/20W User's Guide 475 These are the log options. Click OK to take when a packet matches a rule. You...
Action This is the action the ZyWALL should take the configured action. Threshold OK Cancel Save For flood detection you upload new firmware. 29.3.6 Protocol Anomaly Configuration In the Configuration > Anti-X > ADP > Profile screen, click the Edit icon or click the Add icon and choose a base ... to other screens belonging to this profile, make sure you have clicked OK or Save to save your settings to the ZyWALL, complete the profile and return to complete the profile. ZyWALL USG 20/20W User's Guide 475 These are the log options. Click OK to take when a packet matches a rule. You...
User Guide
Page 593
Uploading a new firmware or default configuration file does not delete your certificates unless you should consider deleting expired or unnecessary certificates before doing so. Object References You cannot ... screen. Subsequent certificates move up by one when you want to use . ZyWALL USG 20/20W User's Guide 593 When the storage space is the ZyWALL's summary list of certificates and certification requests. Add Click this certificate. Remove The ZyWALL keeps all of the ZyWALL's PKI storage space that is recommended that you can have the...
Uploading a new firmware or default configuration file does not delete your certificates unless you should consider deleting expired or unnecessary certificates before doing so. Object References You cannot ... screen. Subsequent certificates move up by one when you want to use . ZyWALL USG 20/20W User's Guide 593 When the storage space is the ZyWALL's summary list of certificates and certification requests. Add Click this certificate. Remove The ZyWALL keeps all of the ZyWALL's PKI storage space that is recommended that you can have the...
User Guide
Page 603
... certificates. Remove The ZyWALL keeps all of the ZyWALL's PKI storage space that you specifically delete them. ZyWALL USG 20/20W User's Guide 603 Chapter 39 Certificates Table 180 Configuration > Object > Certificate > My Certificates > Import (continued) LABEL DESCRIPTION Password OK Cancel This field only applies when you take this action. Uploading a new firmware or default configuration...
... certificates. Remove The ZyWALL keeps all of the ZyWALL's PKI storage space that you specifically delete them. ZyWALL USG 20/20W User's Guide 603 Chapter 39 Certificates Table 180 Configuration > Object > Certificate > My Certificates > Import (continued) LABEL DESCRIPTION Password OK Cancel This field only applies when you take this action. Uploading a new firmware or default configuration...
User Guide
Page 629
...666) to configure Telnet to access the ZyWALL's command line interface. You can be used to securely access the ZyWALL's command line interface. Please also see Chapter 45 on page 693 for more information about firmware and configuration files. ZyWALL USG 20/20W User's Guide 629 CHAPTER 43 System... 43.1 Overview Use the system screens to configure general ZyWALL settings. 43.1.1 What You Can Do in this Chapter • Use the...
...666) to configure Telnet to access the ZyWALL's command line interface. You can be used to securely access the ZyWALL's command line interface. Please also see Chapter 45 on page 693 for more information about firmware and configuration files. ZyWALL USG 20/20W User's Guide 629 CHAPTER 43 System... 43.1 Overview Use the system screens to configure general ZyWALL settings. 43.1.1 What You Can Do in this Chapter • Use the...
User Guide
Page 668
Zone Address Action Apply Reset The entry with which zones FTP can 668 ZyWALL USG 20/20W User's Guide It is allowed or denied to its last-saved settings. 43.10 FTP You can access the ZyWALL zone(s) configured in the Zone field (Accept) or not (Deny). Click Reset to return... FTP To change your changes back to access. This displays whether the computer with the IP address specified above can upload and download the ZyWALL's firmware and configuration files using FTP. To use the default policy. To apply other behavior, configure a rule that does not match any other ...
Zone Address Action Apply Reset The entry with which zones FTP can 668 ZyWALL USG 20/20W User's Guide It is allowed or denied to its last-saved settings. 43.10 FTP You can access the ZyWALL zone(s) configured in the Zone field (Accept) or not (Deny). Click Reset to return... FTP To change your changes back to access. This displays whether the computer with the IP address specified above can upload and download the ZyWALL's firmware and configuration files using FTP. To use the default policy. To apply other behavior, configure a rule that does not match any other ...
User Guide
Page 693
... also download configuration files from the ZyWALL to your computer and upload configuration files from your computer to the ZyWALL. • Use the Firmware Package screen (see Section 45.3 on page 700) to check your current firmware version and upload firmware to the ZyWALL. • Use the Shell Script... scripts in this Chapter • Use the Configuration File screen (see Section 45.4 on page 696) to the ZyWALL. ZyWALL USG 20/20W User's Guide 693 You can store on the ZyWALL. Configuration files use a .conf extension and shell scripts use a .zysh extension. 45.1.1 What You Can Do ...
... also download configuration files from the ZyWALL to your computer and upload configuration files from your computer to the ZyWALL. • Use the Firmware Package screen (see Section 45.3 on page 700) to check your current firmware version and upload firmware to the ZyWALL. • Use the Shell Script... scripts in this Chapter • Use the Configuration File screen (see Section 45.4 on page 696) to the ZyWALL. ZyWALL USG 20/20W User's Guide 693 You can store on the ZyWALL. Configuration files use a .conf extension and shell scripts use a .zysh extension. 45.1.1 What You Can Do ...
User Guide
Page 700
... lastgood.conf to return to the ZyWALL. 700 ZyWALL USG 20/20W User's Guide This process may take up to two minutes. 45.3 The Firmware Package Screen Click Maintenance > File Manager > Firmware Package to begin the upload process. Use the Firmware Package screen to upload. Select this... saved configuration file from your computer to your current firmware version and upload firmware to a valid configuration. This configuration file is currently using. Type in this field or click Browse ... Remember that the ZyWALL is included when you make and save changes during ...
... lastgood.conf to return to the ZyWALL. 700 ZyWALL USG 20/20W User's Guide This process may take up to two minutes. 45.3 The Firmware Package Screen Click Maintenance > File Manager > Firmware Package to begin the upload process. Use the Firmware Package screen to upload. Select this... saved configuration file from your computer to your current firmware version and upload firmware to a valid configuration. This configuration file is currently using. Type in this field or click Browse ... Remember that the ZyWALL is included when you make and save changes during ...
User Guide
Page 701
...ZyWALL again. Figure 421 Firmware Upload In Process ZyWALL USG 20/20W User's Guide 701 Upload This is the recommended method for uploading firmware. Click Browse... After you need to upload. See the CLI Reference Guide for example, "zywall.bin". Released Date File Path Browse... Click Upload to five minutes. Find the firmware package at www.zyxel....com in Process screen, wait two minutes before you need to recover the firmware and how to determine if you see the Firmware Upload in a file that is currently on the ZyWALL. to...
...ZyWALL again. Figure 421 Firmware Upload In Process ZyWALL USG 20/20W User's Guide 701 Upload This is the recommended method for uploading firmware. Click Browse... After you need to upload. See the CLI Reference Guide for example, "zywall.bin". Released Date File Path Browse... Click Upload to five minutes. Find the firmware package at www.zyxel....com in Process screen, wait two minutes before you need to recover the firmware and how to determine if you see the Firmware Upload in a file that is currently on the ZyWALL. to...
User Guide
Page 702
... a long script. If the upload was not successful, the following icon on the ZyWALL at the bottom of the screen. If you specify. Figure 424 Maintenance > File Manager > Shell Script 702 ZyWALL USG 20/20W User's Guide Use the Shell Script screen to open the Shell Script screen.... In some operating systems, you may see the following message appears in the HOME screen. Figure 422 Network Temporarily Disconnected After five minutes, log in again and check your new firmware ...
... a long script. If the upload was not successful, the following icon on the ZyWALL at the bottom of the screen. If you specify. Figure 424 Maintenance > File Manager > Shell Script 702 ZyWALL USG 20/20W User's Guide Use the Shell Script screen to open the Shell Script screen.... In some operating systems, you may see the following message appears in the HOME screen. Figure 422 Network Temporarily Disconnected After five minutes, log in again and check your new firmware ...
User Guide
Page 725
... button to the local storage and stops the system processes. 49.2 The Shutdown Screen To access this to shutdown the ZyWALL. You can cause the firmware to become corrupt. 49.1.1 What You Need To Know Shutdown writes all cached data to shut down before you manually ... the ZyWALL. See also Section 1.5 on different ways to shut down the ZyWALL. CHAPTER 49 Shutdown 49.1 Overview Use this screen, click Maintenance > Shutdown. Always use the CLI command shutdown to shutdown the device in preparation for information on page 34 for disconnecting the power. ZyWALL USG 20/20W User...
... button to the local storage and stops the system processes. 49.2 The Shutdown Screen To access this to shutdown the ZyWALL. You can cause the firmware to become corrupt. 49.1.1 What You Need To Know Shutdown writes all cached data to shut down before you manually ... the ZyWALL. See also Section 1.5 on different ways to shut down the ZyWALL. CHAPTER 49 Shutdown 49.1 Overview Use this screen, click Maintenance > Shutdown. Always use the CLI command shutdown to shutdown the device in preparation for information on page 34 for disconnecting the power. ZyWALL USG 20/20W User...