ZyXEL ZyWALL 110 User manual

Category
Routers
Type
User manual
Quick Start Guide
www.zyxel.com
ZyWALL 110/310/1100 Series
VPN Firewall
Version 3.10
Edition 4, 01/2014
Copyright © 2014 ZyXEL Communications Corporation
User’s Guide
Default Login Details
LAN Port IP Address https://192.168.1.1
User Name admin
Password 1234
ZyWALL 110/310/1100 Series User’s Guide2
IMPORTANT!
READ CAREFULLY BEFORE USE.
KEEP THIS GUIDE FOR FUTURE REFERENCE.
This is a User’s Guide for a series of products. Not all products support all firmware features.
Screenshots and graphics in this book may differ slightly from your product due to differences in
your product firmware or your computer operating system. Every effort has been made to ensure
that the information in this manual is accurate.
Screen Identification Syntax Convention
The > symbol is used to identify a mouse click in a path to access a screen in the web configurator.
For example, Configuration > Network > Interface > Ethernet means first you click the
Configuration icon in the navigation panel, then click the Network menu item, then the
Interface submenu and finally the Ethernet tab in order to access the Ethernet interface screen.
Related Documentation
•Quick Start Guide
The Quick Start Guide shows how to connect the ZyWALL and access the Web Configurator
wizards. (See the wizard real time help for information on configuring each screen.) It also
contains a connection diagram and package contents list.
CLI Reference Guide
The CLI Reference Guide explains how to use the Command-Line Interface (CLI) to configure the
ZyWALL.
Note: It is recommended you use the Web Configurator to configure the ZyWALL.
Web Configurator Online Help
Click the help icon in any screen for help in configuring that screen and supplementary
information.
ZyWALL 110/310/1100 Series User’s Guide
3
Part I: Users Guide.........................................................................................16
Chapter 1
Introduction.........................................................................................................................................18
1.1 Overview ...........................................................................................................................................18
1.2 Management Overview .....................................................................................................................20
1.3 Web Configurator ..............................................................................................................................21
1.3.1 Web Configurator Access ........................................................................................................21
1.3.2 Web Configurator Screens Overview ......................................................................................22
1.3.3 Navigation Panel .....................................................................................................................26
1.3.4 Tables and Lists .......................................................................................................................29
Chapter 2
Installation Setup Wizard...................................................................................................................33
2.1 Installation Setup Wizard Screens ...................................................................................................33
2.1.1 Internet Access Setup - WAN Interface ..................................................................................33
2.1.2 Internet Access: Ethernet .......................................................................................................34
2.1.3 Internet Access: PPPoE ..........................................................................................................34
2.1.4 Internet Access: PPTP ...........................................................................................................35
2.1.5 ISP Parameters .......................................................................................................................35
2.1.6 Internet Access - Finish ..........................................................................................................36
Chapter 3
Hardware Introduction .......................................................................................................................37
3.1 Default Zones, Interfaces, and Ports .................................................................................................37
3.2 Stopping the ZyWALL .......................................................................................................................38
3.3 Rack-mounting ..................................................................................................................................38
3.4 Wall-mounting ...................................................................................................................................39
3.5 Front Panel LEDs ..............................................................................................................................39
3.5.1 Rear Panels .............................................................................................................................41
Chapter 4
Quick Setup Wizards..........................................................................................................................42
4.1 Quick Setup Overview .......................................................................................................................42
4.2 WAN Interface Quick Setup ..............................................................................................................42
4.2.1 Choose an Ethernet Interface ..................................................................................................43
4.2.2 Select WAN Type .....................................................................................................................43
4.2.3 Configure WAN Settings ..........................................................................................................44
4.2.4 WAN and ISP Connection Settings .........................................................................................44
4.2.5 Quick Setup Interface Wizard: Summary ................................................................................46
4.3 VPN Setup Wizard ............................................................................................................................47
4.3.1 Welcome ..................................................................................................................................47
4.3.2 VPN Setup Wizard: Wizard Type .............................................................................................48
ZyWALL 110/310/1100 Series User’s Guide4
4.3.3 VPN Express Wizard - Scenario .............................................................................................49
4.3.4 VPN Express Wizard - Configuration .....................................................................................50
4.3.5 VPN Express Wizard - Summary ...........................................................................................50
4.3.6 VPN Express Wizard - Finish .................................................................................................51
4.3.7 VPN Advanced Wizard - Scenario .........................................................................................52
4.3.8 VPN Advanced Wizard - Phase 1 Settings .............................................................................53
4.3.9 VPN Advanced Wizard - Phase 2 ...........................................................................................55
4.3.10 VPN Advanced Wizard - Summary ......................................................................................56
4.3.11 VPN Advanced Wizard - Finish .............................................................................................56
4.4 VPN Settings for Configuration Provisioning Wizard: Wizard Type ..................................................57
4.4.1 Configuration Provisioning Express Wizard - VPN Settings ...................................................58
4.4.2 Configuration Provisioning VPN Express Wizard - Configuration ..........................................59
4.4.3 VPN Settings for Configuration Provisioning Express Wizard - Summary .............................60
4.4.4 VPN Settings for Configuration Provisioning Express Wizard - Finish ...................................61
4.4.5 VPN Settings for Configuration Provisioning Advanced Wizard - Scenario ...........................62
4.4.6 VPN Settings for Configuration Provisioning Advanced Wizard - Phase 1 Settings ..............63
4.4.7 VPN Settings for Configuration Provisioning Advanced Wizard - Phase 2 ............................64
4.4.8 VPN Settings for Configuration Provisioning Advanced Wizard - Summary ..........................65
4.4.9 VPN Settings for Configuration Provisioning Advanced Wizard- Finish .................................65
Chapter 5
Dashboard...........................................................................................................................................67
5.1 Overview ...........................................................................................................................................67
5.1.1 What You Can Do in this Chapter ............................................................................................67
5.2 The Dashboard Screen .....................................................................................................................67
5.2.1 The CPU Usage Screen ..........................................................................................................72
5.2.2 The Memory Usage Screen ....................................................................................................73
5.2.3 The Active Sessions Screen ....................................................................................................73
5.2.4 The VPN Status Screen ...........................................................................................................74
5.2.5 The DHCP Table Screen .........................................................................................................75
5.2.6 The Number of Login Users Screen .......................................................................................76
Part II: Technical Reference............................................................................77
Chapter 6
Monitor.................................................................................................................................................79
6.1 Overview ...........................................................................................................................................79
6.1.1 What You Can Do in this Chapter ............................................................................................79
6.2 The Port Statistics Screen ................................................................................................................80
6.2.1 The Port Statistics Graph Screen ...........................................................................................81
6.3 Interface Status Screen .....................................................................................................................82
ZyWALL 110/310/1100 Series User’s Guide
5
6.4 The Traffic Statistics Screen ..............................................................................................................86
6.5 The Session Monitor Screen ............................................................................................................89
6.6 The DDNS Status Screen .................................................................................................................91
6.7 IP/MAC Binding Monitor ....................................................................................................................91
6.8 The Login Users Screen ..................................................................................................................92
6.9 Cellular Status Screen .......................................................................................................................93
6.9.1 More Information .....................................................................................................................95
6.10 USB Storage Screen .......................................................................................................................96
6.11 The IPSec Monitor Screen ..............................................................................................................97
6.11.1 Regular Expressions in Searching IPSec SAs .......................................................................98
6.12 The SSL Connection Monitor Screen ..............................................................................................99
6.13 The L2TP over IPSec Session Monitor Screen ...............................................................................99
6.14 Log Screen ....................................................................................................................................100
Chapter 7
Interfaces...........................................................................................................................................103
7.1 Interface Overview ..........................................................................................................................103
7.1.1 What You Can Do in this Chapter ..........................................................................................103
7.1.2 What You Need to Know ........................................................................................................103
7.1.3 What You Need to Do First ....................................................................................................108
7.2 Port Role Screen .............................................................................................................................108
7.3 Ethernet Summary Screen ..............................................................................................................109
7.3.1 Ethernet Edit .........................................................................................................................110
7.3.2 Object References .................................................................................................................122
7.3.3 Add/Edit DHCPv6 Request/Release Options ........................................................................123
7.3.4 Add/Edit DHCP Extended Options ........................................................................................124
7.4 PPP Interfaces ................................................................................................................................125
7.4.1 PPP Interface Summary ........................................................................................................126
7.4.2 PPP Interface Add or Edit .....................................................................................................127
7.5 Cellular Configuration Screen (3G) .................................................................................................132
7.5.1 Cellular Add/Edit Screen .......................................................................................................134
7.6 Tunnel Interfaces ............................................................................................................................140
7.6.1 Configuring a Tunnel .............................................................................................................142
7.6.2 Tunnel Add or Edit Screen .....................................................................................................143
7.7 VLAN Interfaces .............................................................................................................................147
7.7.1 VLAN Summary Screen ........................................................................................................148
7.7.2 VLAN Add/Edit ......................................................................................................................150
7.8 Bridge Interfaces ............................................................................................................................159
7.8.1 Bridge Summary ....................................................................................................................160
7.8.2 Bridge Add/Edit .....................................................................................................................162
7.9 Virtual Interfaces ............................................................................................................................170
7.9.1 Virtual Interfaces Add/Edit .....................................................................................................171
7.10 Interface Technical Reference .......................................................................................................172
ZyWALL 110/310/1100 Series User’s Guide6
Chapter 8
Trunk..................................................................................................................................................176
8.1 Overview .........................................................................................................................................176
8.1.1 What You Can Do in this Chapter ..........................................................................................176
8.1.2 What You Need to Know ........................................................................................................176
8.2 The Trunk Summary Screen ...........................................................................................................179
8.2.1 Configuring a User-Defined Trunk .........................................................................................180
8.2.2 Configuring the System Default Trunk ..................................................................................182
Chapter 9
Policy and Static Routes..................................................................................................................185
9.1 Policy and Static Routes Overview .................................................................................................185
9.1.1 What You Can Do in this Chapter ..........................................................................................185
9.1.2 What You Need to Know .......................................................................................................186
9.2 Policy Route Screen ........................................................................................................................187
9.2.1 Policy Route Edit Screen .......................................................................................................189
9.3 IP Static Route Screen ....................................................................................................................193
9.3.1 Static Route Add/Edit Screen ................................................................................................194
9.4 Policy Routing Technical Reference ................................................................................................195
Chapter 10
Routing Protocols.............................................................................................................................197
10.1 Routing Protocols Overview ..........................................................................................................197
10.1.1 What You Can Do in this Chapter ........................................................................................197
10.1.2 What You Need to Know ......................................................................................................197
10.2 The RIP Screen .............................................................................................................................197
10.3 The OSPF Screen .........................................................................................................................199
10.3.1 Configuring the OSPF Screen .............................................................................................202
10.3.2 OSPF Area Add/Edit Screen ..............................................................................................204
10.3.3 Virtual Link Add/Edit Screen ...............................................................................................206
10.4 Routing Protocol Technical Reference ..........................................................................................206
Chapter 11
Zones.................................................................................................................................................208
11.1 Zones Overview ............................................................................................................................208
11.1.1 What You Can Do in this Chapter ........................................................................................208
11.1.2 What You Need to Know ......................................................................................................208
11.2 The Zone Screen ...........................................................................................................................209
11.3 Zone Edit .......................................................................................................................................210
Chapter 12
DDNS..................................................................................................................................................212
12.1 DDNS Overview ............................................................................................................................212
ZyWALL 110/310/1100 Series User’s Guide
7
12.1.1 What You Can Do in this Chapter ........................................................................................212
12.1.2 What You Need to Know ......................................................................................................212
12.2 The DDNS Screen ........................................................................................................................213
12.2.1 The Dynamic DNS Add/Edit Screen ....................................................................................214
Chapter 13
NAT.....................................................................................................................................................217
13.1 NAT Overview ...............................................................................................................................217
13.1.1 What You Can Do in this Chapter ........................................................................................217
13.1.2 What You Need to Know ......................................................................................................217
13.2 The NAT Screen ............................................................................................................................218
13.2.1 The NAT Add/Edit Screen ....................................................................................................219
13.3 NAT Technical Reference ..............................................................................................................221
Chapter 14
HTTP Redirect...................................................................................................................................224
14.1 Overview .......................................................................................................................................224
14.1.1 What You Can Do in this Chapter ........................................................................................224
14.1.2 What You Need to Know ......................................................................................................224
14.2 The HTTP Redirect Screen ...........................................................................................................225
14.2.1 The HTTP Redirect Edit Screen ..........................................................................................226
Chapter 15
ALG ....................................................................................................................................................228
15.1 ALG Overview ...............................................................................................................................228
15.1.1 What You Can Do in this Chapter ........................................................................................228
15.1.2 What You Need to Know ......................................................................................................228
15.1.3 Before You Begin .................................................................................................................231
15.2 The ALG Screen ...........................................................................................................................231
15.3 ALG Technical Reference .............................................................................................................233
Chapter 16
IP/MAC Binding.................................................................................................................................235
16.1 IP/MAC Binding Overview .............................................................................................................235
16.1.1 What You Can Do in this Chapter ........................................................................................235
16.1.2 What You Need to Know ......................................................................................................235
16.2 IP/MAC Binding Summary ............................................................................................................236
16.2.1 IP/MAC Binding Edit ............................................................................................................236
16.2.2 Static DHCP Edit .................................................................................................................237
16.3 IP/MAC Binding Exempt List .........................................................................................................238
Chapter 17
Inbound Load Balancing..................................................................................................................240
ZyWALL 110/310/1100 Series User’s Guide8
17.1 Inbound Load Balancing Overview ...............................................................................................240
17.1.1 What You Can Do in this Chapter ........................................................................................240
17.2 The Inbound LB Screen ................................................................................................................241
17.2.1 The Inbound LB Add/Edit Screen ........................................................................................242
17.2.2 The Inbound LB Member Add/Edit Screen ..........................................................................244
Chapter 18
Authentication Policy.......................................................................................................................246
18.1 Overview .......................................................................................................................................246
18.1.1 What You Can Do in this Chapter ........................................................................................246
18.1.2 What You Need to Know ......................................................................................................246
18.2 Authentication Policy Screen ........................................................................................................247
18.2.1 Creating/Editing an Authentication Policy ............................................................................249
18.3 User-aware Access Control Example ...........................................................................................251
18.3.1 Set Up User Accounts .........................................................................................................251
18.3.2 Set Up User Groups ............................................................................................................252
18.3.3 Set Up User Authentication Using the RADIUS Server .......................................................252
18.3.4 User Group Authentication Using the RADIUS Server ........................................................254
Chapter 19
Firewall ..............................................................................................................................................256
19.1 Overview .......................................................................................................................................256
19.1.1 What You Can Do in this Chapter ........................................................................................256
19.1.2 What You Need to Know ......................................................................................................256
19.2 The Firewall Screen ......................................................................................................................259
19.2.1 Configuring the Firewall Screen ..........................................................................................259
19.2.2 The Firewall Add/Edit Screen ..............................................................................................263
19.3 The Session Limit Screen .............................................................................................................264
19.3.1 The Session Limit Add/Edit Screen .....................................................................................266
19.4 Firewall Rule Configuration Example ............................................................................................267
19.5 Firewall Rule Example Applications ..............................................................................................269
Chapter 20
IPSec VPN..........................................................................................................................................272
20.1 Virtual Private Networks (VPN) Overview .....................................................................................272
20.1.1 What You Can Do in this Chapter ........................................................................................273
20.1.2 What You Need to Know ......................................................................................................274
20.1.3 Before You Begin .................................................................................................................275
20.2 The VPN Connection Screen ........................................................................................................276
20.2.1 The VPN Connection Add/Edit (IKE) Screen .......................................................................277
20.2.2 The VPN Connection Add/Edit Manual Key Screen ............................................................283
20.3 The VPN Gateway Screen ............................................................................................................285
20.3.1 The VPN Gateway Add/Edit Screen ....................................................................................286
ZyWALL 110/310/1100 Series User’s Guide
9
20.4 VPN Concentrator ........................................................................................................................292
20.4.1 VPN Concentrator Requirements and Suggestions ............................................................293
20.4.2 VPN Concentrator Screen ...................................................................................................293
20.4.3 The VPN Concentrator Add/Edit Screen .............................................................................293
20.5 ZyWALL IPSec VPN Client Configuration Provisioning ................................................................294
20.6 IPSec VPN Background Information .............................................................................................296
Chapter 21
SSL VPN ............................................................................................................................................308
21.1 Overview .......................................................................................................................................308
21.1.1 What You Can Do in this Chapter ........................................................................................308
21.1.2 What You Need to Know ......................................................................................................308
21.2 The SSL Access Privilege Screen ................................................................................................309
21.2.1 The SSL Access Policy Add/Edit Screen ...........................................................................310
21.3 The SSL Global Setting Screen ....................................................................................................313
21.3.1 How to Upload a Custom Logo ............................................................................................314
21.4 SSL VPN Example ........................................................................................................................315
Chapter 22
SSL User Screens.............................................................................................................................318
22.1 Overview .......................................................................................................................................318
22.1.1 What You Need to Know ......................................................................................................318
22.2 Remote SSL User Login ...............................................................................................................319
22.3 The SSL VPN User Screens .........................................................................................................322
22.4 Bookmarking the ZyWALL ............................................................................................................323
22.5 Logging Out of the SSL VPN User Screens ..................................................................................324
22.6 SSL User Application Screen ........................................................................................................324
22.7 SSL User File Sharing ...................................................................................................................325
22.7.1 The Main File Sharing Screen .............................................................................................325
22.7.2 Opening a File or Folder ......................................................................................................326
22.7.3 Downloading a File ..............................................................................................................327
22.7.4 Saving a File ........................................................................................................................327
22.7.5 Creating a New Folder .........................................................................................................328
22.7.6 Renaming a File or Folder ...................................................................................................328
22.7.7 Deleting a File or Folder ......................................................................................................329
22.7.8 Uploading a File ...................................................................................................................329
Chapter 23
ZyWALL SecuExtender ....................................................................................................................331
23.1 The ZyWALL SecuExtender Icon ..................................................................................................331
23.2 Status ............................................................................................................................................331
23.3 View Log .......................................................................................................................................332
23.4 Suspend and Resume the Connection .........................................................................................333
ZyWALL 110/310/1100 Series User’s Guide10
23.5 Stop the Connection ......................................................................................................................333
23.6 Uninstalling the ZyWALL SecuExtender .......................................................................................333
Chapter 24
L2TP VPN...........................................................................................................................................335
24.1 Overview .......................................................................................................................................335
24.1.1 What You Can Do in this Chapter ........................................................................................335
24.1.2 What You Need to Know ......................................................................................................335
24.2 L2TP VPN Screen .........................................................................................................................337
Chapter 25
Bandwidth Management.................................................................................................................339
25.1 Overview .......................................................................................................................................339
25.1.1 What You Can Do in this Chapter ........................................................................................339
25.1.2 What You Need to Know .....................................................................................................339
25.2 The Bandwidth Management Screen ............................................................................................343
25.2.1 The Bandwidth Management Add/Edit Screen ....................................................................345
Chapter 26
Device HA..........................................................................................................................................349
26.1 Overview .......................................................................................................................................349
26.1.1 What You Can Do in this Chapter ........................................................................................349
26.1.2 What You Need to Know ......................................................................................................349
26.1.3 Before You Begin .................................................................................................................350
26.2 Device HA General .......................................................................................................................350
26.3 The Active-Passive Mode Screen .................................................................................................351
26.3.1 Configuring Active-Passive Mode Device HA ......................................................................353
26.4 Configuring an Active-Passive Mode Monitored Interface ............................................................355
26.5 Device HA Technical Reference ....................................................................................................356
Chapter 27
User/Group........................................................................................................................................361
27.1 Overview .......................................................................................................................................361
27.1.1 What You Can Do in this Chapter ........................................................................................361
27.1.2 What You Need To Know .....................................................................................................361
27.2 User Summary Screen ..................................................................................................................363
27.2.1 User Add/Edit Screen ..........................................................................................................364
27.3 User Group Summary Screen .......................................................................................................366
27.3.1 Group Add/Edit Screen ........................................................................................................367
27.4 The User/Group Setting Screen ...................................................................................................368
27.4.1 Default User Authentication Timeout Settings Edit Screens ................................................370
27.4.2 User Aware Login Example .................................................................................................371
27.5 User /Group Technical Reference .................................................................................................372
ZyWALL 110/310/1100 Series User’s Guide
11
Chapter 28
Addresses .........................................................................................................................................374
28.1 Overview .......................................................................................................................................374
28.1.1 What You Can Do in this Chapter ........................................................................................374
28.1.2 What You Need To Know .....................................................................................................374
28.2 Address Summary Screen ............................................................................................................374
28.2.1 IPv4 Address Add/Edit Screen ............................................................................................376
28.2.2 IPv6 Address Add/Edit Screen ............................................................................................377
28.3 Address Group Summary Screen .................................................................................................378
28.3.1 Address Group Add/Edit Screen .........................................................................................379
Chapter 29
Services.............................................................................................................................................380
29.1 Overview .......................................................................................................................................380
29.1.1 What You Can Do in this Chapter ........................................................................................380
29.1.2 What You Need to Know ......................................................................................................380
29.2 The Service Summary Screen ......................................................................................................381
29.2.1 The Service Add/Edit Screen ..............................................................................................382
29.3 The Service Group Summary Screen ..........................................................................................383
29.3.1 The Service Group Add/Edit Screen ...................................................................................384
Chapter 30
Schedules..........................................................................................................................................386
30.1 Overview .......................................................................................................................................386
30.1.1 What You Can Do in this Chapter ........................................................................................386
30.1.2 What You Need to Know ......................................................................................................386
30.2 The Schedule Summary Screen ...................................................................................................387
30.2.1 The One-Time Schedule Add/Edit Screen ...........................................................................388
30.2.2 The Recurring Schedule Add/Edit Screen ...........................................................................389
Chapter 31
AAA Server........................................................................................................................................390
31.1 Overview .......................................................................................................................................390
31.1.1 Directory Service (AD/LDAP) ..............................................................................................390
31.1.2 RADIUS Server ...................................................................................................................390
31.1.3 ASAS ...................................................................................................................................391
31.1.4 What You Can Do in this Chapter ........................................................................................391
31.1.5 What You Need To Know .....................................................................................................391
31.2 Active Directory or LDAP Server Summary ..................................................................................393
31.2.1 Adding an Active Directory or LDAP Server ........................................................................393
31.3 RADIUS Server Summary .............................................................................................................396
31.3.1 Adding a RADIUS Server ...................................................................................................396
ZyWALL 110/310/1100 Series User’s Guide12
Chapter 32
Authentication Method.....................................................................................................................399
32.1 Overview .......................................................................................................................................399
32.1.1 What You Can Do in this Chapter ........................................................................................399
32.1.2 Before You Begin .................................................................................................................399
32.1.3 Example: Selecting a VPN Authentication Method ..............................................................399
32.2 Authentication Method Objects .....................................................................................................400
32.2.1 Creating an Authentication Method Object ..........................................................................400
Chapter 33
Certificates........................................................................................................................................403
33.1 Overview .......................................................................................................................................403
33.1.1 What You Can Do in this Chapter ........................................................................................403
33.1.2 What You Need to Know ......................................................................................................403
33.1.3 Verifying a Certificate ...........................................................................................................405
33.2 The My Certificates Screen ...........................................................................................................406
33.2.1 The My Certificates Add Screen ..........................................................................................407
33.2.2 The My Certificates Edit Screen ..........................................................................................409
33.2.3 The My Certificates Import Screen .....................................................................................412
33.3 The Trusted Certificates Screen ..................................................................................................413
33.3.1 The Trusted Certificates Edit Screen ..................................................................................414
33.3.2 The Trusted Certificates Import Screen ..............................................................................417
33.4 Certificates Technical Reference ...................................................................................................418
Chapter 34
ISP Accounts.....................................................................................................................................419
34.1 Overview .......................................................................................................................................419
34.1.1 What You Can Do in this Chapter ........................................................................................419
34.2 ISP Account Summary ..................................................................................................................419
34.2.1 ISP Account Edit .................................................................................................................420
Chapter 35
SSL Application................................................................................................................................422
35.1 Overview .......................................................................................................................................422
35.1.1 What You Can Do in this Chapter ........................................................................................422
35.1.2 What You Need to Know ......................................................................................................422
35.1.3 Example: Specifying a Web Site for Access ........................................................................423
35.2 The SSL Application Screen .........................................................................................................424
35.2.1 Creating/Editing an SSL Application Object ........................................................................425
Chapter 36
DHCPv6..............................................................................................................................................428
36.1 Overview .......................................................................................................................................428
ZyWALL 110/310/1100 Series User’s Guide
13
36.1.1 What You Can Do in this Chapter ........................................................................................428
36.2 The DHCPv6 Request Screen ......................................................................................................428
36.2.1 DHCPv6 Request Add/Edit Screen .....................................................................................429
36.3 The DHCPv6 Lease Screen ..........................................................................................................429
36.3.1 DHCPv6 Lease Add/Edit Screen .........................................................................................430
Chapter 37
System...............................................................................................................................................432
37.1 Overview .......................................................................................................................................432
37.1.1 What You Can Do in this Chapter ........................................................................................432
37.2 Host Name ....................................................................................................................................433
37.3 USB Storage .................................................................................................................................433
37.4 Date and Time ...............................................................................................................................434
37.4.1 Pre-defined NTP Time Servers List .....................................................................................437
37.4.2 Time Server Synchronization ...............................................................................................437
37.5 Console Port Speed ......................................................................................................................438
37.6 DNS Overview ...............................................................................................................................439
37.6.1 DNS Server Address Assignment .......................................................................................439
37.6.2 Configuring the DNS Screen ...............................................................................................439
37.6.3 Address Record ..................................................................................................................441
37.6.4 PTR Record .........................................................................................................................441
37.6.5 Adding an Address/PTR Record .........................................................................................442
37.6.6 Domain Zone Forwarder .....................................................................................................442
37.6.7 Adding a Domain Zone Forwarder ......................................................................................442
37.6.8 MX Record ..........................................................................................................................443
37.6.9 Adding a MX Record ...........................................................................................................443
37.6.10 Adding a DNS Service Control Rule ..................................................................................444
37.7 WWW Overview ............................................................................................................................445
37.7.1 Service Access Limitations ..................................................................................................445
37.7.2 System Timeout ...................................................................................................................445
37.7.3 HTTPS .................................................................................................................................445
37.7.4 Configuring WWW Service Control .....................................................................................446
37.7.5 Service Control Rules ..........................................................................................................449
37.7.6 Customizing the WWW Login Page ....................................................................................450
37.7.7 HTTPS Example ..................................................................................................................454
37.8 SSH ............................................................................................................................................461
37.8.1 How SSH Works ..................................................................................................................462
37.8.2 SSH Implementation on the ZyWALL ..................................................................................463
37.8.3 Requirements for Using SSH ...............................................................................................463
37.8.4 Configuring SSH ..................................................................................................................463
37.8.5 Secure Telnet Using SSH Examples ...................................................................................464
37.9 Telnet ............................................................................................................................................465
37.9.1 Configuring Telnet ................................................................................................................465
ZyWALL 110/310/1100 Series User’s Guide14
37.10 FTP ............................................................................................................................................467
37.10.1 Configuring FTP ................................................................................................................467
37.11 SNMP .........................................................................................................................................468
37.11.1 Supported MIBs .................................................................................................................469
37.11.2 SNMP Traps ......................................................................................................................470
37.11.3 Configuring SNMP .............................................................................................................470
37.12 Language Screen ........................................................................................................................472
37.13 IPv6 Screen .................................................................................................................................472
Chapter 38
Log and Report .................................................................................................................................474
38.1 Overview .......................................................................................................................................474
38.1.1 What You Can Do In this Chapter ........................................................................................474
38.2 Email Daily Report ........................................................................................................................474
38.3 Log Setting Screens .....................................................................................................................476
38.3.1 Log Setting Summary ..........................................................................................................476
38.3.2 Edit System Log Settings ...................................................................................................478
38.3.3 Edit Log on USB Storage Setting .......................................................................................480
38.3.4 Edit Remote Server Log Settings .......................................................................................482
38.3.5 Log Category Settings Screen .............................................................................................484
Chapter 39
File Manager......................................................................................................................................488
39.1 Overview .......................................................................................................................................488
39.1.1 What You Can Do in this Chapter ........................................................................................488
39.1.2 What you Need to Know ......................................................................................................488
39.2 The Configuration File Screen ......................................................................................................490
39.3 The Firmware Package Screen ....................................................................................................494
39.4 The Shell Script Screen ...............................................................................................................496
Chapter 40
Diagnostics ......................................................................................................................................499
40.1 Overview .......................................................................................................................................499
40.1.1 What You Can Do in this Chapter ........................................................................................499
40.2 The Diagnostic Screen ..................................................................................................................499
40.2.1 The Diagnostics Files Screen ..............................................................................................500
40.3 The Packet Capture Screen ..........................................................................................................501
40.3.1 The Packet Capture Files Screen ........................................................................................503
40.4 Core Dump Screen .......................................................................................................................504
40.4.1 Core Dump Files Screen .....................................................................................................505
40.5 The System Log Screen ................................................................................................................505
Chapter 41
Packet Flow Explore.........................................................................................................................507
ZyWALL 110/310/1100 Series User’s Guide
15
41.1 Overview .......................................................................................................................................507
41.1.1 What You Can Do in this Chapter ........................................................................................507
41.2 The Routing Status Screen ...........................................................................................................507
41.3 The SNAT Status Screen ..............................................................................................................511
Chapter 42
Reboot ...............................................................................................................................................514
42.1 Overview .......................................................................................................................................514
42.1.1 What You Need To Know .....................................................................................................514
42.2 The Reboot Screen .......................................................................................................................514
Chapter 43
Shutdown...........................................................................................................................................515
43.1 Overview .......................................................................................................................................515
43.1.1 What You Need To Know .....................................................................................................515
43.2 The Shutdown Screen ...................................................................................................................515
Chapter 44
Troubleshooting................................................................................................................................516
44.1 Resetting the ZyWALL ..................................................................................................................524
44.2 Getting More Troubleshooting Help ..............................................................................................525
Appendix A Legal Information..........................................................................................................526
Index ..................................................................................................................................................529
16
PART I
Users Guide
17
ZyWALL 110/310/1100 Series User’s Guide 18
CHAPTER 1
Introduction
1.1 Overview
Note: This help covers the following ZyWALL models and refers to them all as “ZyWALL”.
Features and interface names vary by model. Key feature differences between ZyWALL models are
as follows. Other features are common to all models although features may vary slightly by model.
See the specific product’s datasheet for detailed specifications.
Here are some ZyWALL application scenarios.
IPv6 Routing
The ZyWALL supports IPv6 Ethernet, PPP, VLAN, and bridge routing. You may also create IPv6
policy routes and IPv6 objects. The ZyWALL can also route IPv6 packets through IPv4 networks
using different tunneling methods.
Figure 1 Applications: IPv6 Routing
VPN Connectivity
Set up VPN tunnels with other companies, branch offices, telecommuters, and business travelers to
provide secure access to your network. You can also purchase the ZyWALL OTPv2 One-Time
Password System for strong two-factor authentication for Web Configurator, Web access, SSL VPN,
and ZyXEL IPSec VPN client user logins.
Table 1 Model-Specific Features
FEATURE ZYWALL
Rack-mounting 110, 310, 1100
Wall-mounting 110
Port Role (see Section 7.2 on page 108) 110
Compact Flash Card Slot (not supported at the time of writing) 110
Chapter 1 Introduction
ZyWALL 110/310/1100 Series User’s Guide
19
Figure 2 Applications: VPN Connectivity
SSL VPN Network Access
SSL VPN lets remote users use their web browsers for a very easy-to-use VPN solution. A user just
browses to the ZyWALL’s web address and enters his user name and password to securely connect
to the ZyWALL’s network. Here full tunnel mode creates a virtual connection for a remote user and
gives him a private IP address in the same subnet as the local network so he can access network
resources in the same way as if he were part of the internal network.
Figure 3 SSL VPN With Full Tunnel Mode
User-Aware Access Control
Set up security policies to restrict access to sensitive information and shared resources based on
the user who is trying to access it. In the following figure user A can access both the Internet and
an internal file server. User B has a lower level of access and can only access the Internet. User C is
not even logged in and cannot access either.
OTP PIN
SafeWord 2008
Authentication Server
File
Email
Web-based
Server
Server
Application
*****
Web Mail File Share
Web-based Application
https://
Application Server
Non-Web
LAN (192.168.1.X)
Chapter 1 Introduction
ZyWALL 110/310/1100 Series User’s Guide
20
Figure 4 Applications: User-Aware Access Control
Load Balancing
Set up multiple connections to the Internet on the same port, or different ports, including cellular
interfaces. In either case, you can balance the traffic loads between them.
Figure 5 Applications: Multiple WAN Interfaces
1.2 Management Overview
You can manage the ZyWALL in the following ways.
Web Configurator
The Web Configurator allows easy ZyWALL setup and management using an Internet browser. This
User’s Guide provides information about the Web Configurator.
Figure 6 Managing the ZyWALL: Web Configurator
A
B
C
  • Page 1 1
  • Page 2 2
  • Page 3 3
  • Page 4 4
  • Page 5 5
  • Page 6 6
  • Page 7 7
  • Page 8 8
  • Page 9 9
  • Page 10 10
  • Page 11 11
  • Page 12 12
  • Page 13 13
  • Page 14 14
  • Page 15 15
  • Page 16 16
  • Page 17 17
  • Page 18 18
  • Page 19 19
  • Page 20 20
  • Page 21 21
  • Page 22 22
  • Page 23 23
  • Page 24 24
  • Page 25 25
  • Page 26 26
  • Page 27 27
  • Page 28 28
  • Page 29 29
  • Page 30 30
  • Page 31 31
  • Page 32 32
  • Page 33 33
  • Page 34 34
  • Page 35 35
  • Page 36 36
  • Page 37 37
  • Page 38 38
  • Page 39 39
  • Page 40 40
  • Page 41 41
  • Page 42 42
  • Page 43 43
  • Page 44 44
  • Page 45 45
  • Page 46 46
  • Page 47 47
  • Page 48 48
  • Page 49 49
  • Page 50 50
  • Page 51 51
  • Page 52 52
  • Page 53 53
  • Page 54 54
  • Page 55 55
  • Page 56 56
  • Page 57 57
  • Page 58 58
  • Page 59 59
  • Page 60 60
  • Page 61 61
  • Page 62 62
  • Page 63 63
  • Page 64 64
  • Page 65 65
  • Page 66 66
  • Page 67 67
  • Page 68 68
  • Page 69 69
  • Page 70 70
  • Page 71 71
  • Page 72 72
  • Page 73 73
  • Page 74 74
  • Page 75 75
  • Page 76 76
  • Page 77 77
  • Page 78 78
  • Page 79 79
  • Page 80 80
  • Page 81 81
  • Page 82 82
  • Page 83 83
  • Page 84 84
  • Page 85 85
  • Page 86 86
  • Page 87 87
  • Page 88 88
  • Page 89 89
  • Page 90 90
  • Page 91 91
  • Page 92 92
  • Page 93 93
  • Page 94 94
  • Page 95 95
  • Page 96 96
  • Page 97 97
  • Page 98 98
  • Page 99 99
  • Page 100 100
  • Page 101 101
  • Page 102 102
  • Page 103 103
  • Page 104 104
  • Page 105 105
  • Page 106 106
  • Page 107 107
  • Page 108 108
  • Page 109 109
  • Page 110 110
  • Page 111 111
  • Page 112 112
  • Page 113 113
  • Page 114 114
  • Page 115 115
  • Page 116 116
  • Page 117 117
  • Page 118 118
  • Page 119 119
  • Page 120 120
  • Page 121 121
  • Page 122 122
  • Page 123 123
  • Page 124 124
  • Page 125 125
  • Page 126 126
  • Page 127 127
  • Page 128 128
  • Page 129 129
  • Page 130 130
  • Page 131 131
  • Page 132 132
  • Page 133 133
  • Page 134 134
  • Page 135 135
  • Page 136 136
  • Page 137 137
  • Page 138 138
  • Page 139 139
  • Page 140 140
  • Page 141 141
  • Page 142 142
  • Page 143 143
  • Page 144 144
  • Page 145 145
  • Page 146 146
  • Page 147 147
  • Page 148 148
  • Page 149 149
  • Page 150 150
  • Page 151 151
  • Page 152 152
  • Page 153 153
  • Page 154 154
  • Page 155 155
  • Page 156 156
  • Page 157 157
  • Page 158 158
  • Page 159 159
  • Page 160 160
  • Page 161 161
  • Page 162 162
  • Page 163 163
  • Page 164 164
  • Page 165 165
  • Page 166 166
  • Page 167 167
  • Page 168 168
  • Page 169 169
  • Page 170 170
  • Page 171 171
  • Page 172 172
  • Page 173 173
  • Page 174 174
  • Page 175 175
  • Page 176 176
  • Page 177 177
  • Page 178 178
  • Page 179 179
  • Page 180 180
  • Page 181 181
  • Page 182 182
  • Page 183 183
  • Page 184 184
  • Page 185 185
  • Page 186 186
  • Page 187 187
  • Page 188 188
  • Page 189 189
  • Page 190 190
  • Page 191 191
  • Page 192 192
  • Page 193 193
  • Page 194 194
  • Page 195 195
  • Page 196 196
  • Page 197 197
  • Page 198 198
  • Page 199 199
  • Page 200 200
  • Page 201 201
  • Page 202 202
  • Page 203 203
  • Page 204 204
  • Page 205 205
  • Page 206 206
  • Page 207 207
  • Page 208 208
  • Page 209 209
  • Page 210 210
  • Page 211 211
  • Page 212 212
  • Page 213 213
  • Page 214 214
  • Page 215 215
  • Page 216 216
  • Page 217 217
  • Page 218 218
  • Page 219 219
  • Page 220 220
  • Page 221 221
  • Page 222 222
  • Page 223 223
  • Page 224 224
  • Page 225 225
  • Page 226 226
  • Page 227 227
  • Page 228 228
  • Page 229 229
  • Page 230 230
  • Page 231 231
  • Page 232 232
  • Page 233 233
  • Page 234 234
  • Page 235 235
  • Page 236 236
  • Page 237 237
  • Page 238 238
  • Page 239 239
  • Page 240 240
  • Page 241 241
  • Page 242 242
  • Page 243 243
  • Page 244 244
  • Page 245 245
  • Page 246 246
  • Page 247 247
  • Page 248 248
  • Page 249 249
  • Page 250 250
  • Page 251 251
  • Page 252 252
  • Page 253 253
  • Page 254 254
  • Page 255 255
  • Page 256 256
  • Page 257 257
  • Page 258 258
  • Page 259 259
  • Page 260 260
  • Page 261 261
  • Page 262 262
  • Page 263 263
  • Page 264 264
  • Page 265 265
  • Page 266 266
  • Page 267 267
  • Page 268 268
  • Page 269 269
  • Page 270 270
  • Page 271 271
  • Page 272 272
  • Page 273 273
  • Page 274 274
  • Page 275 275
  • Page 276 276
  • Page 277 277
  • Page 278 278
  • Page 279 279
  • Page 280 280
  • Page 281 281
  • Page 282 282
  • Page 283 283
  • Page 284 284
  • Page 285 285
  • Page 286 286
  • Page 287 287
  • Page 288 288
  • Page 289 289
  • Page 290 290
  • Page 291 291
  • Page 292 292
  • Page 293 293
  • Page 294 294
  • Page 295 295
  • Page 296 296
  • Page 297 297
  • Page 298 298
  • Page 299 299
  • Page 300 300
  • Page 301 301
  • Page 302 302
  • Page 303 303
  • Page 304 304
  • Page 305 305
  • Page 306 306
  • Page 307 307
  • Page 308 308
  • Page 309 309
  • Page 310 310
  • Page 311 311
  • Page 312 312
  • Page 313 313
  • Page 314 314
  • Page 315 315
  • Page 316 316
  • Page 317 317
  • Page 318 318
  • Page 319 319
  • Page 320 320
  • Page 321 321
  • Page 322 322
  • Page 323 323
  • Page 324 324
  • Page 325 325
  • Page 326 326
  • Page 327 327
  • Page 328 328
  • Page 329 329
  • Page 330 330
  • Page 331 331
  • Page 332 332
  • Page 333 333
  • Page 334 334
  • Page 335 335
  • Page 336 336
  • Page 337 337
  • Page 338 338
  • Page 339 339
  • Page 340 340
  • Page 341 341
  • Page 342 342
  • Page 343 343
  • Page 344 344
  • Page 345 345
  • Page 346 346
  • Page 347 347
  • Page 348 348
  • Page 349 349
  • Page 350 350
  • Page 351 351
  • Page 352 352
  • Page 353 353
  • Page 354 354
  • Page 355 355
  • Page 356 356
  • Page 357 357
  • Page 358 358
  • Page 359 359
  • Page 360 360
  • Page 361 361
  • Page 362 362
  • Page 363 363
  • Page 364 364
  • Page 365 365
  • Page 366 366
  • Page 367 367
  • Page 368 368
  • Page 369 369
  • Page 370 370
  • Page 371 371
  • Page 372 372
  • Page 373 373
  • Page 374 374
  • Page 375 375
  • Page 376 376
  • Page 377 377
  • Page 378 378
  • Page 379 379
  • Page 380 380
  • Page 381 381
  • Page 382 382
  • Page 383 383
  • Page 384 384
  • Page 385 385
  • Page 386 386
  • Page 387 387
  • Page 388 388
  • Page 389 389
  • Page 390 390
  • Page 391 391
  • Page 392 392
  • Page 393 393
  • Page 394 394
  • Page 395 395
  • Page 396 396
  • Page 397 397
  • Page 398 398
  • Page 399 399
  • Page 400 400
  • Page 401 401
  • Page 402 402
  • Page 403 403
  • Page 404 404
  • Page 405 405
  • Page 406 406
  • Page 407 407
  • Page 408 408
  • Page 409 409
  • Page 410 410
  • Page 411 411
  • Page 412 412
  • Page 413 413
  • Page 414 414
  • Page 415 415
  • Page 416 416
  • Page 417 417
  • Page 418 418
  • Page 419 419
  • Page 420 420
  • Page 421 421
  • Page 422 422
  • Page 423 423
  • Page 424 424
  • Page 425 425
  • Page 426 426
  • Page 427 427
  • Page 428 428
  • Page 429 429
  • Page 430 430
  • Page 431 431
  • Page 432 432
  • Page 433 433
  • Page 434 434
  • Page 435 435
  • Page 436 436
  • Page 437 437
  • Page 438 438
  • Page 439 439
  • Page 440 440
  • Page 441 441
  • Page 442 442
  • Page 443 443
  • Page 444 444
  • Page 445 445
  • Page 446 446
  • Page 447 447
  • Page 448 448
  • Page 449 449
  • Page 450 450
  • Page 451 451
  • Page 452 452
  • Page 453 453
  • Page 454 454
  • Page 455 455
  • Page 456 456
  • Page 457 457
  • Page 458 458
  • Page 459 459
  • Page 460 460
  • Page 461 461
  • Page 462 462
  • Page 463 463
  • Page 464 464
  • Page 465 465
  • Page 466 466
  • Page 467 467
  • Page 468 468
  • Page 469 469
  • Page 470 470
  • Page 471 471
  • Page 472 472
  • Page 473 473
  • Page 474 474
  • Page 475 475
  • Page 476 476
  • Page 477 477
  • Page 478 478
  • Page 479 479
  • Page 480 480
  • Page 481 481
  • Page 482 482
  • Page 483 483
  • Page 484 484
  • Page 485 485
  • Page 486 486
  • Page 487 487
  • Page 488 488
  • Page 489 489
  • Page 490 490
  • Page 491 491
  • Page 492 492
  • Page 493 493
  • Page 494 494
  • Page 495 495
  • Page 496 496
  • Page 497 497
  • Page 498 498
  • Page 499 499
  • Page 500 500
  • Page 501 501
  • Page 502 502
  • Page 503 503
  • Page 504 504
  • Page 505 505
  • Page 506 506
  • Page 507 507
  • Page 508 508
  • Page 509 509
  • Page 510 510
  • Page 511 511
  • Page 512 512
  • Page 513 513
  • Page 514 514
  • Page 515 515
  • Page 516 516
  • Page 517 517
  • Page 518 518
  • Page 519 519
  • Page 520 520
  • Page 521 521
  • Page 522 522
  • Page 523 523
  • Page 524 524
  • Page 525 525
  • Page 526 526
  • Page 527 527
  • Page 528 528
  • Page 529 529
  • Page 530 530
  • Page 531 531
  • Page 532 532
  • Page 533 533
  • Page 534 534
  • Page 535 535
  • Page 536 536
  • Page 537 537
  • Page 538 538
  • Page 539 539
  • Page 540 540
  • Page 541 541
  • Page 542 542
  • Page 543 543
  • Page 544 544
  • Page 545 545

ZyXEL ZyWALL 110 User manual

Category
Routers
Type
User manual

Ask a question and I''ll find the answer in the document

Finding information in a document is now easier with AI