User Guide
Page 14
... Object 145 7.12.2 Configure the Policy Route 146 7.13 How to Set Up a Wireless LAN 146 7.13.1 Set Up User Accounts 147 7.13.2 Create the WLAN Interface 147 7.13.3 Set Up the Wireless Clients to Use the WLAN Interface 150 Part II: Technical Reference 163 Chapter 8 Dashboard ......165 8.1 Overview ...165 8.1.1 What You Can Do in this Chapter 165 8.2 The Dashboard Screen ...165 8.2.1 The CPU Usage Screen 171 8.2.2 The Memory Usage Screen 172 14 ZyWALL USG 20/20W User's Guide
... Object 145 7.12.2 Configure the Policy Route 146 7.13 How to Set Up a Wireless LAN 146 7.13.1 Set Up User Accounts 147 7.13.2 Create the WLAN Interface 147 7.13.3 Set Up the Wireless Clients to Use the WLAN Interface 150 Part II: Technical Reference 163 Chapter 8 Dashboard ......165 8.1 Overview ...165 8.1.1 What You Can Do in this Chapter 165 8.2 The Dashboard Screen ...165 8.2.1 The CPU Usage Screen 171 8.2.2 The Memory Usage Screen 172 14 ZyWALL USG 20/20W User's Guide
User Guide
Page 26
Table of Contents 49.1 Overview ...725 49.1.1 What You Need To Know 725 49.2 The Shutdown Screen ...725 Chapter 50 Troubleshooting...727 50.1 Resetting the ZyWALL ...738 50.2 Getting More Troubleshooting Help 739 Chapter 51 Product Specifications ...741 51.1 Power Adaptor Specifications 745 Appendix A Log Descriptions 747 Appendix B Common Services 799 Appendix C Wireless LANs 803 Appendix D Importing Certificates 819 Appendix E Open Software Announcements 845 Appendix F Legal Information 935 Index...939 26 ZyWALL USG 20/20W User's Guide
Table of Contents 49.1 Overview ...725 49.1.1 What You Need To Know 725 49.2 The Shutdown Screen ...725 Chapter 50 Troubleshooting...727 50.1 Resetting the ZyWALL ...738 50.2 Getting More Troubleshooting Help 739 Chapter 51 Product Specifications ...741 51.1 Power Adaptor Specifications 745 Appendix A Log Descriptions 747 Appendix B Common Services 799 Appendix C Wireless LANs 803 Appendix D Importing Certificates 819 Appendix E Open Software Announcements 845 Appendix F Legal Information 935 Index...939 26 ZyWALL USG 20/20W User's Guide
User Guide
Page 33
... network through the connected 3G USB card. Web Configurator The Web Configurator allows easy ZyWALL setup and management using remote management (for example, SSH or Telnet) or via the ZyWALL USG 20/20W User's Guide 33 WLAN (20W Green Off Only) On The wireless function is disabled on this port. On This port has a successful link. 1.4 Management...
... network through the connected 3G USB card. Web Configurator The Web Configurator allows easy ZyWALL setup and management using remote management (for example, SSH or Telnet) or via the ZyWALL USG 20/20W User's Guide 33 WLAN (20W Green Off Only) On The wireless function is disabled on this port. On This port has a successful link. 1.4 Management...
User Guide
Page 48
...log entries. 3.3.2.3 Configuration Menu Use the configuration menu screens to configure the ZyWALL's features. Service View the licensed service status and upgrade licensed services. 48 ZyWALL USG 20/20W User's Guide SSL Lists users currently logged into the ZyWALL. VPN Monitor IPSec Displays and manages the active IPSec SAs. Interface Status ... the device and activate trial services. Traffic Statistics Collect and display traffic statistics. Session Monitor Displays the status of the ZyWALL's wireless clients. DDNS Status Displays the status of the...
...log entries. 3.3.2.3 Configuration Menu Use the configuration menu screens to configure the ZyWALL's features. Service View the licensed service status and upgrade licensed services. 48 ZyWALL USG 20/20W User's Guide SSL Lists users currently logged into the ZyWALL. VPN Monitor IPSec Displays and manages the active IPSec SAs. Interface Status ... the device and activate trial services. Traffic Statistics Collect and display traffic statistics. Session Monitor Displays the status of the ZyWALL's wireless clients. DDNS Status Displays the status of the...
User Guide
Page 49
... installed wireless LAN card. Cellular Configure a cellular Internet connection for load balancing and link High Availability (HA). Trunk Create and manage trunks (groups of interfaces) for an installed 3G card. VPN Gateway Configure IKE tunnels. Static Route Create and manage IP static routing information. RIP Configure device-level RIP settings. Auth. ZyWALL USG 20/20W...
... installed wireless LAN card. Cellular Configure a cellular Internet connection for load balancing and link High Availability (HA). Trunk Create and manage trunks (groups of interfaces) for an installed 3G card. VPN Gateway Configure IKE tunnels. Static Route Create and manage IP static routing information. RIP Configure device-level RIP settings. Auth. ZyWALL USG 20/20W...
User Guide
Page 146
This lets you need to configure a policy route that has the ZyWALL use on the wireless LAN card. You can configure different interfaces to USG 20W. Click Configuration > Network > Routing > Add. This example uses LAN-to Public-IPs and click OK. Set the Source Network Address Translation ... 104 Configuring the Policy Route 7.13 How to Set Up a Wireless LAN This tutorial applies only to use the range of public IP addresses as the source address for WAN to LAN traffic. You can configure 146 ZyWALL USG 20/20W User's Guide This example uses LAN_SUBNET1. Chapter 7 Tutorials 7.12...
This lets you need to configure a policy route that has the ZyWALL use on the wireless LAN card. You can configure different interfaces to USG 20W. Click Configuration > Network > Routing > Add. This example uses LAN-to Public-IPs and click OK. Set the Source Network Address Translation ... 104 Configuring the Policy Route 7.13 How to Set Up a Wireless LAN This tutorial applies only to use the range of public IP addresses as the source address for WAN to LAN traffic. You can configure 146 ZyWALL USG 20/20W User's Guide This example uses LAN_SUBNET1. Chapter 7 Tutorials 7.12...
User Guide
Page 147
...password the WLAN user needs to enter to connect to the wireless LAN. 1 Click Configuration > Object > User/Group > User and the Add icon. 2 Set the User Name to wlan_user. Enter (and re-enter) the user's password. Click OK. ZyWALL USG 20/20W User's Guide 147 This example shows how to open the... WLAN Add screen. Chapter 7 Tutorials the WLAN interfaces before or after you can use the ZyWALL's local user database with WPA or WPA2 instead of needing an external...
...password the WLAN user needs to enter to connect to the wireless LAN. 1 Click Configuration > Object > User/Group > User and the Add icon. 2 Set the User Name to wlan_user. Enter (and re-enter) the user's password. Click OK. ZyWALL USG 20/20W User's Guide 147 This example shows how to open the... WLAN Add screen. Chapter 7 Tutorials the WLAN interfaces before or after you can use the ZyWALL's local user database with WPA or WPA2 instead of needing an external...
User Guide
Page 148
...zones. If all of your wireless clients support WPA2, select WPA2-Enterprise as follows. Select to which security settings the ZyWALL applies to . Set the Authentication Type to belong (the WLAN zone in this example). Click OK. 148 ZyWALL USG 20/20W User's Guide This determines which... security zone you want the WLAN interface to Auth Method. The ZyWALL can modify it to authenticate the users. Chapter 7 Tutorials 2 Edit this example)....
...zones. If all of your wireless clients support WPA2, select WPA2-Enterprise as follows. Select to which security settings the ZyWALL applies to . Set the Authentication Type to belong (the WLAN zone in this example). Click OK. 148 ZyWALL USG 20/20W User's Guide This determines which... security zone you want the WLAN interface to Auth Method. The ZyWALL can modify it to authenticate the users. Chapter 7 Tutorials 2 Edit this example)....
User Guide
Page 150
... (for how to use Funk Odyssey's wireless client software if you how to have a wireless client (not included with the ZyWALL) use the wireless network. 7.13.3.1 Configure the ZyXEL Wireless Client Utility This example covers how to configure ZyXEL's wireless client utility (not included with the ZyWALL) to a rogue AP). 150 ZyWALL USG 20/20W User's Guide Chapter 7 Tutorials 3 Turn on page 154...
... (for how to use Funk Odyssey's wireless client software if you how to have a wireless client (not included with the ZyWALL) use the wireless network. 7.13.3.1 Configure the ZyXEL Wireless Client Utility This example covers how to configure ZyXEL's wireless client utility (not included with the ZyWALL) to a rogue AP). 150 ZyWALL USG 20/20W User's Guide Chapter 7 Tutorials 3 Turn on page 154...
User Guide
Page 151
Select Infrastructure and click Next. Figure 108 ZyXEL Wireless Client Chapter 7 Tutorials 2 Add a new profile. Figure 109 ZyXEL Wireless Client > Profile ZyWALL USG 20/20W User's Guide 151 It is also the SSID (name) of the wireless network. This example uses "ZYXEL_WPA" as the name. 1 Open the wireless client utility and click Profile.
Select Infrastructure and click Next. Figure 108 ZyXEL Wireless Client Chapter 7 Tutorials 2 Add a new profile. Figure 109 ZyXEL Wireless Client > Profile ZyWALL USG 20/20W User's Guide 151 It is also the SSID (name) of the wireless network. This example uses "ZYXEL_WPA" as the name. 1 Open the wireless client utility and click Profile.
User Guide
Page 152
Figure 111 ZyXEL Wireless Client > Profile: Security Settings 152 ZyWALL USG 20/20W User's Guide Chapter 7 Tutorials 3 Select WPA2 as the Login Name and enter the account's password (also wlan_user in this example. In TTLS Protocol, select PAP. Click Next. Figure 110 ZyXEL Wireless Client > Profile: Security Type 4 Set the encryption type to TKIP and the EAP type to TTLS. Configure wlan_user as the security type and click Next.
Figure 111 ZyXEL Wireless Client > Profile: Security Settings 152 ZyWALL USG 20/20W User's Guide Chapter 7 Tutorials 3 Select WPA2 as the Login Name and enter the account's password (also wlan_user in this example. In TTLS Protocol, select PAP. Click Next. Figure 110 ZyXEL Wireless Client > Profile: Security Type 4 Set the encryption type to TKIP and the EAP type to TTLS. Configure wlan_user as the security type and click Next.
User Guide
Page 153
Figure 112 ZyXEL Wireless Client > Profile: Save Chapter 7 Tutorials 6 Click Activate Now. 5 Confirm your settings and click Save. Figure 113 ZyXEL Wireless Client > Profile: Activate ZyWALL USG 20/20W User's Guide 153
Figure 112 ZyXEL Wireless Client > Profile: Save Chapter 7 Tutorials 6 Click Activate Now. 5 Confirm your settings and click Save. Figure 113 ZyXEL Wireless Client > Profile: Activate ZyWALL USG 20/20W User's Guide 153
User Guide
Page 154
Figure 115 Odyssey Access Client Manager > Profiles 154 ZyWALL USG 20/20W User's Guide Chapter 7 Tutorials 7 The ZYXEL_WPA profile displays in your list of profiles. Figure 114 ZyXEL Wireless Client > Profile: Activate Since the ZyXEL utility does not have the wireless client validate the ZyWALL's certificate, you can go to Section 7.13.3.4 on page 162. 7.13.3.2 Configure the Funk Odyssey...
Figure 115 Odyssey Access Client Manager > Profiles 154 ZyWALL USG 20/20W User's Guide Chapter 7 Tutorials 7 The ZYXEL_WPA profile displays in your list of profiles. Figure 114 ZyXEL Wireless Client > Profile: Activate Since the ZyXEL utility does not have the wireless client validate the ZyWALL's certificate, you can go to Section 7.13.3.4 on page 162. 7.13.3.2 Configure the Funk Odyssey...
User Guide
Page 157
... it. Figure 120 Odyssey Access Client Manager > Networks > Add Use the next section to import the ZyWALL's certificate into the wireless client. 7.13.3.3 Wireless Clients Import the ZyWALL's Certificate You must import the ZyWALL's certificate into each wireless client computer. ZyWALL USG 20/20W User's Guide 157 Use the Configuration > Object > Certificate > Edit screen (see Section 39.2.2 on page 599...
... it. Figure 120 Odyssey Access Client Manager > Networks > Add Use the next section to import the ZyWALL's certificate into the wireless client. 7.13.3.3 Wireless Clients Import the ZyWALL's Certificate You must import the ZyWALL's certificate into each wireless client computer. ZyWALL USG 20/20W User's Guide 157 Use the Configuration > Object > Certificate > Edit screen (see Section 39.2.2 on page 599...
User Guide
Page 161
... see the newly imported certificate listed in the ZyWALL's My Certificates screen's Subject and Issuer fields (respectively). ZyWALL USG 20/20W User's Guide 161 Figure 126 Internet Explorer: Trusted Root Certification Authorities The My Certificates screen indicates what type of information is to import the certificate into each wireless client computer that is being displayed, such...
... see the newly imported certificate listed in the ZyWALL's My Certificates screen's Subject and Issuer fields (respectively). ZyWALL USG 20/20W User's Guide 161 Figure 126 Internet Explorer: Trusted Root Certification Authorities The My Certificates screen indicates what type of information is to import the certificate into each wireless client computer that is being displayed, such...
User Guide
Page 162
Chapter 7 Tutorials 7.13.3.4 Wireless Clients Use the WLAN Interface A login screen displays when the wireless client attempts to connect to the wireless interface. Enter the username and password and click OK. Funk Odyssey Access Wireless Client Login Example 162 ZyWALL USG 20/20W User's Guide
Chapter 7 Tutorials 7.13.3.4 Wireless Clients Use the WLAN Interface A login screen displays when the wireless client attempts to connect to the wireless interface. Enter the username and password and click OK. Funk Odyssey Access Wireless Client Login Example 162 ZyWALL USG 20/20W User's Guide
User Guide
Page 177
...on page 178) to look at a list of the users currently logged into the ZyWALL. • Use the System Status > WLAN Status screen (Section 9.9 on page 191) to view the connection status of the wireless clients connected to (or trying to connect to) a IEEE 802.11b/g card ... USG 20W only. • Use the System Status > Cellular Status screen (Section 9.9 on page 191) to check your 3G connection status. • Use the System Status > USB Storage screen (Section 9.11 on page 195) to check status and statistics information. 9.1.1 What You Can Do in the ZyWALL. ZyWALL USG 20/20W User...
...on page 178) to look at a list of the users currently logged into the ZyWALL. • Use the System Status > WLAN Status screen (Section 9.9 on page 191) to view the connection status of the wireless clients connected to (or trying to connect to) a IEEE 802.11b/g card ... USG 20W only. • Use the System Status > Cellular Status screen (Section 9.9 on page 191) to check your 3G connection status. • Use the System Status > USB Storage screen (Section 9.11 on page 195) to check status and statistics information. 9.1.1 What You Can Do in the ZyWALL. ZyWALL USG 20/20W User...
User Guide
Page 191
... not associated with any entry. The screen appears as shown. This field displays the amount of reauthentication time remaining and the amount of the wireless clients connected to (or trying to connect to end a user's session. Refresh Click this icon to ) a IEEE 802.11b/g card installed...ID This field displays the user name of the computer used to log in the ZyWALL. To open the station monitor, click Monitor > System Status > WLAN Status. Figure 143 Monitor > System Status > WLAN Status ZyWALL USG 20/20W User's Guide 191 See Chapter 33 on page 539. Type This field displays ...
... not associated with any entry. The screen appears as shown. This field displays the amount of reauthentication time remaining and the amount of the wireless clients connected to (or trying to connect to end a user's session. Refresh Click this icon to ) a IEEE 802.11b/g card installed...ID This field displays the user name of the computer used to log in the ZyWALL. To open the station monitor, click Monitor > System Status > WLAN Status. Figure 143 Monitor > System Status > WLAN Status ZyWALL USG 20/20W User's Guide 191 See Chapter 33 on page 539. Type This field displays ...
User Guide
Page 217
... virtual VLAN interfaces, and virtual bridge interfaces. • Use the Trunk screens (Chapter 12 on page 222) to configure load balancing. ZyWALL USG 20/20W User's Guide 217 Ethernet interfaces are used to ease security policy configuration. 11.1.1 What You Can Do in this Chapter • Use ....1 Interface Overview Use the Interface screens to the ZyWALL. You can also create interfaces on top of other interfaces. • Ports are the physical ports to which you connect cables. • Interfaces are the foundation for interfaces on a wireless LAN card. • Use the VLAN screens...
... virtual VLAN interfaces, and virtual bridge interfaces. • Use the Trunk screens (Chapter 12 on page 222) to configure load balancing. ZyWALL USG 20/20W User's Guide 217 Ethernet interfaces are used to ease security policy configuration. 11.1.1 What You Can Do in this Chapter • Use ....1 Interface Overview Use the Interface screens to the ZyWALL. You can also create interfaces on top of other interfaces. • Ports are the physical ports to which you connect cables. • Interfaces are the foundation for interfaces on a wireless LAN card. • Use the VLAN screens...
User Guide
Page 218
... • Ethernet interfaces are the foundation for defining other types of interfaces--Ethernet, PPP, cellular, VLAN, bridge, and 218 ZyWALL USG 20/20W User's Guide Port groups and trunks have the following characteristics (although not all characteristics apply to each type of interface. Chapter ...11 Interfaces 11.1.2 What You Need to Know Interface Characteristics Interfaces generally have a lot of characteristics that are for wireless LAN (IEEE 802.11b/g) connections via a connected 3G device. • WLAN interfaces are specific to each type of interface...
... • Ethernet interfaces are the foundation for defining other types of interfaces--Ethernet, PPP, cellular, VLAN, bridge, and 218 ZyWALL USG 20/20W User's Guide Port groups and trunks have the following characteristics (although not all characteristics apply to each type of interface. Chapter ...11 Interfaces 11.1.2 What You Need to Know Interface Characteristics Interfaces generally have a lot of characteristics that are for wireless LAN (IEEE 802.11b/g) connections via a connected 3G device. • WLAN interfaces are specific to each type of interface...