ZyXEL Communications ZyXEL ZyWALL P1 User Manual

Zywall p1, User’s guide

Table of contents

Document Outline

ZyWALL P1 V3.64 User’s Guide
Copyright
Federal Communications Commission (FCC) Interference Statement
Safety Warnings
ZyXEL Limited Warranty
Customer Support
Table of Contents
List of Figures
List of Tables
Preface
Getting to Know Your ZyWALL
- 1.1 Overview
- 1.2 ZyWALL Features
  - 1.2.1 Physical Features
  - 1.2.2 Non-Physical Features
- 1.3 Applications
  - 1.3.1 Secure Network Access for Telecommuters
  - 1.3.2 LAN Network Protection
- 1.4 ZyWALL Hardware Connection
- 1.5 Front Panel LED
Introducing the Web Configurator
- 2.1 Overview
- 2.2 Accessing the Web Configurator
- 2.3 Resetting the ZyWALL
  - 2.3.1 Procedure to Use the Reset Button
- 2.4 Navigating the Web Configurator
Wizard Setup
- 3.1 Overview
- 3.2 Internet Access Wizard Setup
- 3.3 VPN Wizard Setup
- 3.4 IPSec Algorithms
LAN Screens
- 4.1 LAN Overview
- 4.2 DHCP Setup
  - 4.2.1 IP Pool Setup
  - 4.2.2 DNS Servers
- 4.3 LAN TCP/IP
- 4.4 Configuring LAN
- 4.5 Configuring Static DHCP
WAN Screens
- 5.1 WAN Overview
  - 5.1.1 TCP/IP Priority (Metric)
  - 5.1.2 WAN MAC Address
- 5.2 WAN Route Setup
- 5.3 Configuring WAN Setup
- 5.4 Dynamic DNS
  - 5.4.1 DYNDNS Wildcard
  - 5.4.2 Configuring Dynamic DNS
Firewalls
- 6.1 Firewall Overview
- 6.2 Types of Firewalls
- 6.3 Introduction to ZyXEL’s Firewall
- 6.4 Denial of Service
  - 6.4.1 Basics
  - 6.4.2 Types of DoS Attacks
- 6.5 Stateful Inspection
- 6.6 Guidelines For Enhancing Security With Your Firewall
- 6.7 Packet Filtering Vs Firewall
  - 6.7.1 Packet Filtering:
    - 6.7.1.1 When To Use Filtering
  - 6.7.2 Firewall
    - 6.7.2.1 When To Use The Firewall
Firewall Screens
- 7.1 Access Methods
- 7.2 Firewall Policies Overview
- 7.3 Rule Logic Overview
- 7.4 Connection Direction Examples
  - 7.4.1 LAN To WAN Rules
  - 7.4.2 WAN To LAN Rules
- 7.5 Alerts
- 7.6 Configuring Firewall
- 7.7 Example Firewall Rule
- 7.8 Predefined Services
- 7.9 Anti-Probing
- 7.10 Configuring Attack Alert
  - 7.10.1 Threshold Values
  - 7.10.2 Half-Open Sessions
    - 7.10.2.1 TCP Maximum Incomplete and Blocking Time
Introduction to IPSec
- 8.1 VPN Overview
- 8.2 IPSec Architecture
  - 8.2.1 IPSec Algorithms
  - 8.2.2 Key Management
- 8.3 Encapsulation
  - 8.3.1 Transport Mode
  - 8.3.2 Tunnel Mode
- 8.4 IPSec and NAT
VPN Screens
- 9.1 VPN/IPSec Overview
- 9.2 IPSec Algorithms
  - 9.2.1 AH (Authentication Header) Protocol
  - 9.2.2 ESP (Encapsulating Security Payload) Protocol
- 9.3 My ZyWALL
- 9.4 Secure Gateway Address
  - 9.4.1 Dynamic Secure Gateway Address
  - 9.4.2 Nailed Up
- 9.5 NAT Traversal
- 9.6 ID Type and Content
  - 9.6.1 ID Type and Content Examples
- 9.7 Pre-Shared Key
- 9.8 IKE VPN Rule Summary Screen
  - 9.8.1 Configurign an IKE VPN Rule
  - 9.8.2 Configuring an IKE VPN Policy
    - 9.8.2.1 Activating a VPN Connection
- 9.9 Viewing SA Monitor
- 9.10 Configuring Global Setting
- 9.11 Telecommuter VPN/IPSec Examples
  - 9.11.1 Telecommuters Sharing One VPN Rule Example
  - 9.11.2 Telecommuters Using Unique VPN Rules Example
- 9.12 VPN and Remote Management
Certificates
- 10.1 Certificates Overview
  - 10.1.1 Advantages of Certificates
- 10.2 Self-signed Certificates
- 10.3 Configuration Summary
- 10.4 My Certificates
- 10.5 Certificate File Formats
- 10.6 Importing a Certificate
- 10.7 Creating a Certificate
- 10.8 My Certificate Details
- 10.9 Trusted CAs
- 10.10 Importing a Trusted CA’s Certificate
- 10.11 Trusted CA Certificate Details
- 10.12 Trusted Remote Hosts
- 10.13 Verifying a Trusted Remote Host’s Certificate
  - 10.13.1 Trusted Remote Host Certificate Fingerprints
- 10.14 Importing a Trusted Remote Host’s Certificate
- 10.15 Trusted Remote Host Certificate Details
- 10.16 Directory Servers
- 10.17 Add or Edit a Directory Server
Network Address Translation (NAT)
- 11.1 NAT Overview
- 11.2 Using NAT
  - 11.2.1 SUA (Single User Account) Versus NAT
- 11.3 Configuring NAT Overview
- 11.4 Port Forwarding
- 11.5 Configuring Port Forwarding
- 11.6 Configuring Trigger Port
Static Route
- 12.1 Static Route Overview
- 12.2 Configuring IP Static Route
  - 12.2.1 Configuring a Static Route Entry
Remote Management
- 13.1 Remote Management Overview
- 13.2 Introduction to HTTPS
- 13.3 Configuring WWW
- 13.4 HTTPS Example
- 13.5 SSH Overview
- 13.6 How SSH works
- 13.7 SSH Implementation on the ZyWALL
  - 13.7.1 Requirements for Using SSH
- 13.8 Configuring SSH
- 13.9 Secure Telnet Using SSH Examples
  - 13.9.1 Example 1: Microsoft Windows
  - 13.9.2 Example 2: Linux
- 13.10 Secure FTP Using SSH Example
- 13.11 Telnet
- 13.12 Configuring TELNET
- 13.13 Configuring FTP
- 13.14 Configuring SNMP
- 13.15 Configuring DNS
- 13.16 Introducing Vantage CNM
- 13.17 Configuring CNM
UPnP
- 14.1 Universal Plug and Play Overview
- 14.2 UPnP and ZyXEL
- 14.3 Configuring UPnP
- 14.4 Displaying UPnP Port Mapping
- 14.5 Installing UPnP in Windows Example
  - 14.5.1 Installing UPnP in Windows Me
  - 14.5.2 Installing UPnP in Windows XP
- 14.6 Using UPnP in Windows XP Example
  - 14.6.1 Auto-discover Your UPnP-enabled Network Device
  - 14.6.2 Web Configurator Easy Access
Logs Screens
- 15.1 Configuring View Log
- 15.2 Log Description Example
- 15.3 Configuring Log Settings
- 15.4 Configuring Reports
Maintenance
- 16.1 Maintenance Overview
  - 16.1.1 General Setup and System Name
  - 16.1.2 Domain Name
- 16.2 Configuring Password
- 16.3 Pre-defined NTP Time Servers List
- 16.4 Configuring Time and Date
  - 16.4.1 Time Server Synchronization
- 16.5 F/W Upload Screen
- 16.6 Configuration Screen
- 16.7 Restart Screen
Firmware and Configuration File Maintenance
- 17.1 Introduction
- 17.2 Filename Conventions
- 17.3 Backup Configuration
- 17.4 Restore Configuration
  - 17.4.1 Restore Using FTP
  - 17.4.2 Restore Using FTP Session Example
- 17.5 Uploading Firmware and Configuration Files
Troubleshooting
- 18.1 Problems Starting Up the ZyWALL
- 18.2 Problems Accessing the ZyWALL
  - 18.2.1 Pop-up Windows, JavaScripts and Java Permissions
- 18.3 Problems with the LAN Interface
- 18.4 Problems with the WAN Interface
- 18.5 Problems with Internet Access
- 18.6 Problems with the Password
- 18.7 Problems with Remote Management
Setting up Your Computer’s IP Address
IP Subnetting
PPPoE
PPTP
Triangle Route
SIP Passthrough
VPN Setup
Importing Certificates
Command Interpreter
Firewall Commands
NetBIOS Filter Commands
Certificates Commands
Brute-Force Password Guessing Protection
Log Descriptions
Index
- Numerics
- A
- B
- C
- D
- E
- F
- G
- H
- I
- K
- L
- M
- N
- O
- P
- Q
- R
- S
- T
- U
- V
- W
- X
- Z