Directory

Brands

ZyXEL Communications manuals

Hardware

ZyXEL ZyWALL 5

Manual

ZyXEL Communications ZyXEL ZyWALL 5 User Manual

Zywall 5, User’s guide

Text mode
Original mode

background image

ZyWALL 5

Internet Security Appliance

User’s Guide

Version 3.64

8/2005

Pages: 1 2 3 4 5 6 7 … 667

wrong Brand
wrong Model
non readable

Table of contents

Document Outline

ZyWALL 5 User's Guide
Copyright
Federal Communications Commission (FCC) Interference Statement
Safety Warnings
ZyXEL Limited Warranty
Customer Support
Table of Contents
List of Figures
List of Tables
Preface
1. Getting to Know Your ZyWALL
- 1.1 ZyWALL 5 Internet Security Appliance Overview
- 1.2 ZyWALL Features
  - 1.2.1 Physical Features
  - 1.2.2 Non-Physical Features
- 1.3 Applications for the ZyWALL
2. Introducing the Web Configurator
- 2.1 Web Configurator Overview
- 2.2 Accessing the ZyWALL Web Configurator
- 2.3 Resetting the ZyWALL
  - 2.3.1 Procedure To Use The Reset Button
  - 2.3.2 Uploading a Configuration File Via Console Port
- 2.4 Navigating the ZyWALL Web Configurator
3. Wizard Setup
- 3.1 Wizard Setup Overview
- 3.2 Internet Access
  - 3.2.1 ISP Parameters
  - 3.2.2 Internet Access Wizard Setup Complete
- 3.3 VPN Wizard
4. LAN Screens
- 4.1 LAN Overview
- 4.2 DHCP Setup
  - 4.2.1 IP Pool Setup
- 4.3 LAN TCP/IP
- 4.4 DNS Servers
- 4.5 Configuring LAN
- 4.6 Configuring Static DHCP
- 4.7 Configuring IP Alias
- 4.8 Configuring Port Roles
5. Bridge Screens
- 5.1 Bridge Loop
- 5.2 Spanning Tree Protocol (STP)
- 5.3 Configuring Bridge
- 5.4 Configuring Port Roles
6. Wireless LAN
- 6.1 Introduction
  - 6.1.1 Additional Installation Requirements for Using 802.1x
- 6.2 Wireless Security
- 6.3 Security Parameters Summary
- 6.4 WEP Encryption
- 6.5 802.1x Overview
  - 6.5.1 Introduction to RADIUS
    - 6.5.1.1 Types of RADIUS Messages
  - 6.5.2 EAP Authentication Overview
- 6.6 Dynamic WEP Key Exchange
- 6.7 Introduction to WPA
  - 6.7.1 User Authentication
  - 6.7.2 Encryption
- 6.8 WPA-PSK Application Example
- 6.9 WPA with RADIUS Application Example
- 6.10 Wireless Client WPA Supplicants
- 6.11 Configuring Wireless LAN
- 6.12 Configuring MAC Filter
7. WAN Screens
- 7.1 WAN Overview
  - 7.1.1 WAN IP Address Assignment
  - 7.1.2 WAN MAC Address
- 7.2 TCP/IP Priority (Metric)
- 7.3 Configuring Route
- 7.4 Configuring WAN Setup
- 7.5 Traffic Redirect
- 7.6 Configuring Traffic Redirect
- 7.7 Configuring Dial Backup
- 7.8 Advanced Modem Setup
- 7.9 Configuring Advanced Modem Setup
8. DMZ Screens
- 8.1 DMZ Overview
- 8.2 Configuring DMZ
- 8.3 Configuring IP Alias
- 8.4 DMZ Public IP Address Example
- 8.5 DMZ Private and Public IP Address Example
- 8.6 Configuring Port Roles
9. Firewalls
- 9.1 Firewall Overview
- 9.2 Types of Firewalls
- 9.3 Introduction to ZyXEL’s Firewall
- 9.4 Denial of Service
  - 9.4.1 Basics
  - 9.4.2 Types of DoS Attacks
- 9.5 Stateful Inspection
- 9.6 Guidelines For Enhancing Security With Your Firewall
- 9.7 Packet Filtering Vs Firewall
  - 9.7.1 Packet Filtering:
    - 9.7.1.1 When To Use Filtering
  - 9.7.2 Firewall
    - 9.7.2.1 When To Use The Firewall
10. Firewall Screens
- 10.1 Access Methods
- 10.2 Firewall Policies Overview
- 10.3 Rule Logic Overview
- 10.4 Connection Direction Examples
  - 10.4.1 LAN To WAN Rules
  - 10.4.2 WAN To LAN Rules
- 10.5 Alerts
- 10.6 Configuring Firewall
- 10.7 Example Firewall Rule
- 10.8 Predefined Services
- 10.9 Anti-Probing
- 10.10 DoS Thresholds
  - 10.10.1 Threshold Values
  - 10.10.2 Half-Open Sessions
    - 10.10.2.1 TCP Maximum Incomplete and Blocking Time
11. Content Filtering Screens
- 11.1 Content Filtering Overview
- 11.2 General Content Filter Configuration
- 11.3 Content Filtering with an External Database
- 11.4 Categories and Registering
- 11.5 Customization
- 11.6 Customizing Keyword Blocking URL Checking
- 11.7 Content Filtering Cache
12. Content Filtering Registration and Reports
- 12.1 Introduction to myZyXEL.com
  - 12.1.1 A Note on myZyXEL.com Numbers
- 12.2 myZyXEL.com Account Registration
- 12.3 Registering Your ZyXEL Device
- 12.4 Content Filtering Registration
- 12.5 Checking Content Filtering Activation
- 12.6 Updating Product Registration Information
- 12.7 Viewing Content Filtering Reports
- 12.8 Configuration File
13. Introduction to IPSec
- 13.1 VPN Overview
- 13.2 IPSec Architecture
  - 13.2.1 IPSec Algorithms
  - 13.2.2 Key Management
- 13.3 Encapsulation
  - 13.3.1 Transport Mode
  - 13.3.2 Tunnel Mode
- 13.4 IPSec and NAT
14. VPN Screens
- 14.1 VPN/IPSec Overview
- 14.2 IPSec Algorithms
  - 14.2.1 AH (Authentication Header) Protocol
  - 14.2.2 ESP (Encapsulating Security Payload) Protocol
- 14.3 My ZyWALL
- 14.4 Remote Gateway Address
  - 14.4.1 Dynamic Remote Gateway Address
- 14.5 Nailed Up
- 14.6 NAT Traversal
  - 14.6.1 NAT Traversal Configuration
- 14.7 ID Type and Content
  - 14.7.1 ID Type and Content Examples
- 14.8 IKE Phases
- 14.9 X-Auth (Extended Authentication)
  - 14.9.1 Authentication Server
- 14.10 Icons Key
- 14.11 IPSec Summary Fields
- 14.12 IKE VPN Rule Summary Screen
  - 14.12.1 Configuring an IKE Gateway Policy
  - 14.12.2 Configuring an IKE Network Policy
    - 14.12.2.1 Associating a Network Policy to a Gateway Policy
- 14.13 Manual VPN Rule Summary Screen
  - 14.13.1 Security Parameter Index (SPI)
  - 14.13.2 Editing Manual VPN Rules
- 14.14 Viewing SA Monitor
- 14.15 Configuring Global Setting
- 14.16 Telecommuter VPN/IPSec Examples
  - 14.16.1 Telecommuters Sharing One VPN Rule Example
  - 14.16.2 Telecommuters Using Unique VPN Rules Example
- 14.17 VPN and Remote Management
15. Certificates
- 15.1 Certificates Overview
  - 15.1.1 Advantages of Certificates
- 15.2 Self-signed Certificates
- 15.3 Configuration Summary
- 15.4 My Certificates
- 15.5 Certificate File Formats
- 15.6 Importing a Certificate
- 15.7 Creating a Certificate
- 15.8 My Certificate Details
- 15.9 Trusted CAs
- 15.10 Importing a Trusted CA’s Certificate
- 15.11 Trusted CA Certificate Details
- 15.12 Trusted Remote Hosts
- 15.13 Verifying a Trusted Remote Host’s Certificate
  - 15.13.1 Trusted Remote Host Certificate Fingerprints
- 15.14 Importing a Trusted Remote Host’s Certificate
- 15.15 Trusted Remote Host Certificate Details
- 15.16 Directory Servers
- 15.17 Add or Edit a Directory Server
16. Authentication Server
- 16.1 Authentication Server Overview
- 16.2 Local User Database
- 16.3 RADIUS
- 16.4 Configuring Local User Database
- 16.5 Configuring RADIUS
17. Network Address Translation (NAT)
- 17.1 NAT Overview
- 17.2 Using NAT
  - 17.2.1 SUA (Single User Account) Versus NAT
- 17.3 Configuring NAT Overview
- 17.4 Configuring Address Mapping
  - 17.4.1 Address Mapping Edit
- 17.5 Port Forwarding
- 17.6 Configuring Port Forwarding
- 17.7 Configuring Trigger Port
18. Static Route
- 18.1 Static Route Overview
- 18.2 Configuring IP Static Route
  - 18.2.1 Configuring a Static Route Entry
19. Bandwidth Management
- 19.1 Bandwidth Management Overview
- 19.2 Bandwidth Classes and Filters
- 19.3 Proportional Bandwidth Allocation
- 19.4 Application-based Bandwidth Management
- 19.5 Subnet-based Bandwidth Management
- 19.6 Application and Subnet-based Bandwidth Management
- 19.7 Scheduler
  - 19.7.1 Priority-based Scheduler
  - 19.7.2 Fairness-based Scheduler
- 19.8 Maximize Bandwidth Usage
  - 19.8.1 Reserving Bandwidth for Non-Bandwidth Class Traffic
  - 19.8.2 Maximize Bandwidth Usage Example
    - 19.8.2.1 Priority-based Allotment of Unused and Unbudgeted Bandwidth
    - 19.8.2.2 Fairness-based Allotment of Unused and Unbudgeted Bandwidth
- 19.9 Bandwidth Borrowing
  - 19.9.1 Bandwidth Borrowing Example
  - 19.9.2 Maximize Bandwidth Usage With Bandwidth Borrowing
- 19.10 Configuring Summary
- 19.11 Configuring Class Setup
  - 19.11.1 Bandwidth Manager Class Configuration
  - 19.11.2 Bandwidth Management Statistics
- 19.12 Configuring Monitor
20. DNS
- 20.1 DNS Overview
- 20.2 DNS Server Address Assignment
- 20.3 DNS Servers
- 20.4 Address Record
  - 20.4.1 DNS Wildcard
- 20.5 Name Server Record
  - 20.5.1 Private DNS Server
- 20.6 The System Screen
  - 20.6.1 Adding an Address Record
  - 20.6.2 Inserting a Name Server record
- 20.7 DNS Cache
- 20.8 Configure DNS Cache
- 20.9 Configuring DNS LAN
- 20.10 Dynamic DNS
  - 20.10.1 DYNDNS Wildcard
- 20.11 Configuring Dynamic DNS
21. Remote Management
- 21.1 Remote Management Overview
- 21.2 Introduction to HTTPS
- 21.3 Configuring WWW
- 21.4 HTTPS Example
- 21.5 SSH Overview
- 21.6 How SSH works
- 21.7 SSH Implementation on the ZyWALL
  - 21.7.1 Requirements for Using SSH
- 21.8 Configuring SSH
- 21.9 Secure Telnet Using SSH Examples
  - 21.9.1 Example 1: Microsoft Windows
  - 21.9.2 Example 2: Linux
- 21.10 Secure FTP Using SSH Example
- 21.11 Telnet
- 21.12 Configuring TELNET
- 21.13 Configuring FTP
- 21.14 Configuring SNMP
- 21.15 Configuring DNS
22. UPnP
- 22.1 Universal Plug and Play Overview
- 22.2 UPnP and ZyXEL
- 22.3 Configuring UPnP
- 22.4 Displaying UPnP Port Mapping
- 22.5 Installing UPnP in Windows Example
  - 22.5.1 Installing UPnP in Windows Me
  - 22.5.2 Installing UPnP in Windows XP
- 22.6 Using UPnP in Windows XP Example
  - 22.6.1 Auto-discover Your UPnP-enabled Network Device
  - 22.6.2 Web Configurator Easy Access
23. Logs Screens
- 23.1 Configuring View Log
- 23.2 Log Description Example
- 23.3 Configuring Log Settings
- 23.4 Configuring Reports
24. Maintenance
- 24.1 Maintenance Overview
- 24.2 General Setup
  - 24.2.1 General Setup and System Name
  - 24.2.2 Domain Name
- 24.3 Configuring Password
- 24.4 Pre-defined NTP Time Servers List
- 24.5 Configuring Time and Date
  - 24.5.1 Resetting the Time
  - 24.5.2 Time Server Synchronization
- 24.6 Introduction to Transparent Bridging
- 24.7 Transparent Firewalls
- 24.8 Configuring Device Mode
- 24.9 F/W Upload Screen
- 24.10 Configuration Screen
- 24.11 Restart Screen
25. Introducing the SMT
- 25.1 Introduction to the SMT
- 25.2 Accessing the SMT via the Console Port
  - 25.2.1 Initial Screen
  - 25.2.2 Entering the Password
- 25.3 Navigating the SMT Interface
  - 25.3.1 Main Menu
  - 25.3.2 SMT Menus Overview
- 25.4 Changing the System Password
- 25.5 Resetting the ZyWALL
26. SMT Menu 1 - General Setup
- 26.1 Introduction to General Setup
- 26.2 Configuring General Setup
  - 26.2.1 Configuring Dynamic DNS
    - 26.2.1.1 Editing DDNS Host
27. WAN and Dial Backup Setup
- 27.1 Introduction to WAN and Dial Backup Setup
- 27.2 WAN Setup
- 27.3 Dial Backup
- 27.4 Configuring Dial Backup in Menu 2
- 27.5 Advanced WAN Setup
- 27.6 Remote Node Profile (Backup ISP)
- 27.7 Editing PPP Options
- 27.8 Editing TCP/IP Options
- 27.9 Editing Login Script
- 27.10 Remote Node Filter
28. LAN Setup
- 28.1 Introduction to LAN Setup
- 28.2 Accessing the LAN Menus
- 28.3 LAN Port Filter Setup
- 28.4 TCP/IP and DHCP Ethernet Setup Menu
  - 28.4.1 IP Alias Setup
- 28.5 Wireless LAN Setup
  - 28.5.1 MAC Address Filter Setup
29. Internet Access
- 29.1 Introduction to Internet Access Setup
- 29.2 Ethernet Encapsulation
- 29.3 Configuring the PPTP Client
- 29.4 Configuring the PPPoE Client
- 29.5 Basic Setup Complete
30. DMZ Setup
- 30.1 Configuring DMZ Setup
- 30.2 DMZ Port Filter Setup
- 30.3 TCP/IP Setup
  - 30.3.1 IP Address
  - 30.3.2 IP Alias Setup
31. Remote Node Setup
- 31.1 Introduction to Remote Node Setup
- 31.2 Remote Node Setup
- 31.3 Remote Node Profile Setup
- 31.4 Edit IP
- 31.5 Remote Node Filter
- 31.6 Traffic Redirect
32. IP Static Route Setup
- 32.1 IP Static Route Setup
33. Network Address Translation (NAT)
- 33.1 Using NAT
  - 33.1.1 SUA (Single User Account) Versus NAT
  - 33.1.2 Applying NAT
- 33.2 NAT Setup
  - 33.2.1 Address Mapping Sets
- 33.3 Configuring a Server behind NAT
- 33.4 General NAT Examples
- 33.5 Trigger Port Forwarding
  - 33.5.1 Two Points To Remember About Trigger Ports
34. Introducing the ZyWALL Firewall
- 34.1 Using ZyWALL SMT Menus
  - 34.1.1 Activating the Firewall
35. Filter Configuration
- 35.1 Introduction to Filters
  - 35.1.1 The Filter Structure of the ZyWALL
- 35.2 Configuring a Filter Set
- 35.3 Example Filter
- 35.4 Filter Types and NAT
- 35.5 Firewall Versus Filters
- 35.6 Applying a Filter
36. SNMP Configuration
- 36.1 SNMP Configuration
- 36.2 SNMP Traps
37. System Information & Diagnosis
- 37.1 Introduction to System Status
- 37.2 System Status
- 37.3 System Information and Console Port Speed
  - 37.3.1 System Information
  - 37.3.2 Console Port Speed
- 37.4 Log and Trace
- 37.5 Diagnostic
  - 37.5.1 WAN DHCP
38. Firmware and Configuration File Maintenance
- 38.1 Introduction
- 38.2 Filename Conventions
- 38.3 Backup Configuration
- 38.4 Restore Configuration
- 38.5 Uploading Firmware and Configuration Files
39. System Maintenance Menus 8 to 10
- 39.1 Command Interpreter Mode
  - 39.1.1 Command Syntax
  - 39.1.2 Command Usage
- 39.2 Call Control Support
  - 39.2.1 Budget Management
  - 39.2.2 Call History
- 39.3 Time and Date Setting
  - 39.3.1 Resetting the Time
40. Remote Management
- 40.1 Remote Management
  - 40.1.1 Remote Management Limitations
41. Call Scheduling
- 41.1 Introduction to Call Scheduling
42. Troubleshooting
- 42.1 Problems Starting Up the ZyWALL
- 42.2 Problems with the LAN Interface
- 42.3 Problems with the DMZ Interface
- 42.4 Problems with the WAN Interface
- 42.5 Problems with Internet Access
- 42.6 Problems with Remote Management
- 42.7 Problems Accessing the ZyWALL
  - 42.7.1 Pop-up Windows, JavaScripts and Java Permissions
A. Product Specifications
- Specification Tables
- Compatible ZyXEL WLAN Cards
- WLAN Card Installation
- Cable Pin Assignments
- Power Adaptor Specifications
B. Setting up Your Computer’s IP Address
- Windows 95/98/Me
- Installing Components
- Configuring
- Verifying Settings
- Windows 2000/NT/XP
- Verifying Settings
- Macintosh OS 8/9
- Verifying Settings
- Macintosh OS X
- Verifying Settings
C. IP Subnetting
- IP Addressing
- IP Classes
- Subnet Masks
- Subnetting
- Example: Two Subnets
- Example: Four Subnets
- Example Eight Subnets
- Subnetting With Class A and Class B Networks.
D. PPPoE
- PPPoE in Action
- Benefits of PPPoE
- Traditional Dial-up Scenario
- How PPPoE Works
- ZyWALL as a PPPoE Client
E. PPTP
- What is PPTP?
- How can we transport PPP frames from a computer to a broadband modem over Ethernet?
- PPTP and the ZyWALL
- PPTP Protocol Overview
- Control & PPP Connections
- Call Connection
- PPP Data Connection
F. Wireless LANs
- Wireless LAN Topologies
- Ad-hoc Wireless LAN Configuration
- BSS
- ESS
- Channel
- RTS/CTS
- Fragmentation Threshold
- Preamble Type
- IEEE 802.1x
- RADIUS
- Types of RADIUS Messages
- EAP Authentication
- Types of Authentication
- EAP-MD5 (Message-Digest Algorithm 5)
- EAP-TLS (Transport Layer Security)
- EAP-TTLS (Tunneled Transport Layer Service)
- PEAP (Protected EAP)
- LEAP
- WEP Encryption
- WEP Authentication Steps
- Dynamic WEP Key Exchange
- WPA
- User Authentication
- Encryption
- Security Parameters Summary
- Roaming
- Requirements for Roaming
G. Triangle Route
- The Ideal Setup
- The “Triangle Route” Problem
- The “Triangle Route” Solutions
- IP Aliasing
- Gateways on the WAN Side
- Configuring Triangle Route via Commands
H. SIP Passthrough
- SIP
- SIP Identities
- SIP Number
- SIP Service Domain
- SIP Call Progression
- SIP Servers
- SIP User Agent Server
- SIP Proxy Server
- SIP Redirect Server
- SIP Register Server
- RTP
- SIP ALG
- STUN
- ZyXEL SIP ALG
- SIP ALG and NAT
- SIP ALG and Firewall
- SIP ALG and Multiple WAN
- Enabling/Disabling the SIP ALG
- Signaling Session Timeout
- Audio Session Timeout
I. VPN Setup
- General Notes
- Dynamic IPSec Rule
- Full Feature NAT Mode
- VPN Configuration
- Dialing the VPN Tunnel via Web Configurator
- VPN Troubleshooting
- VPN Log
- IPSec Debug
- Use a VPN Tunnel
- FTP Example
J. Importing Certificates
- Import ZyWALL Certificates into Netscape Navigator
- Importing the ZyWALL’s Certificate into Internet Explorer
- Enrolling and Importing SSL Client Certificates
- Installing the CA’s Certificate
- Installing Your Personal Certificate(s)
- Using a Certificate When Accessing the ZyWALL Example
K. Command Interpreter
- Command Syntax
- Command Usage
L. Firewall Commands
M. NetBIOS Filter Commands
- Introduction
- Display NetBIOS Filter Settings
- NetBIOS Filter Configuration
N. Certificates Commands
O. Brute-Force Password Guessing Protection
- Example
P. Boot Commands
Q. Log Descriptions
- Log Commands
- Configuring What You Want the ZyWALL to Log
- Displaying Logs
- Log Command Example
Index
- Numerics
- A
- B
- C
- D
- E
- F
- G
- H
- I
- K
- L
- M
- N
- O
- P
- Q
- R
- S
- T
- U
- V
- W
- X
- Z

See also other documents in the category ZyXEL Communications Hardware:

ISDN Terminal Adapter Omni.Net Lite (84 pages)
ZYAIR G-360 V2 (2 pages)
DMA-1000 Series (192 pages)
PLA-450 (2 pages)
EXT-108 (2 pages)
P-2602HWLNI (496 pages)
ZyXEL ZyWALL 2WG (730 pages)
P841C (41 pages)
Network Device P-2302 (359 pages)
P-870M-I (2 pages)
P-661HW Series (383 pages)
Prestige 310 (161 pages)
802.11g Wireless Access Point ZyXEL G-560 (144 pages)
P-2602HW (2 pages)
Prestige 2602R Series (450 pages)
5 Series (835 pages)
Prestige 623ME-T (253 pages)
omni.net LCD series (53 pages)
ZyXEL ZyAIR B-1000 (231 pages)
P-2302HWUDL-P1 Series (368 pages)
Prestige 645R (180 pages)
ZYWALL IDP 10 (42 pages)
802.11g Wireless Firewall Router P-320W (215 pages)
PRESTIGE 660R-6XC (6 pages)
56K Plus II (88 pages)
P-2802HW-i (2 pages)
ZYAIR AG-200 (2 pages)
POWERLINE PL-100 (33 pages)
HomePlug AV DMA-1100P (198 pages)
Access Router P-660R-T (9 pages)
omni.net LCD+M (186 pages)
G-162 (85 pages)
PL-100 (33 pages)
ZyXEL ZyAIR A-6000 (46 pages)
ZyXEL ZyAIR AG-225H (14 pages)
2304R-P1 (124 pages)
XTREMEMIMO M-302 (2 pages)
nbg334s (2 pages)
P-793H 601156 (1 page)
Ethernet Extension Card EEC1020 (8 pages)
P-871M (26 pages)
Prestige 128L (114 pages)
P-2812HNU-51c (2 pages)
ZyWALL SSL 10 (64 pages)