ZyXEL ZYWALL USG 300 Owner's manual

Category
Routers
Type
Owner's manual
www.zyxel.com
ZyWALL USG 300
Unified Security Gateway
Users Guide
Version 2.00
9/2007
Edition 2
DEFAULT LOGIN
LAN Port 1
IP Address http://192.168.1.1
User Name admin
Password 1234
About This User's Guide
ZyWALL USG 300 User’s Guide 3
About This User's Guide
This manual is designed to guide you through the configuration of your ZyWALL for its
various applications. Generally, it is organized as follows.
Introduction (ZyWALL, web configurator)
Features (by menu item in the web configurator)
Overview, including background
Web Configurator screens
• Appendices
Intended Audience
This manual is intended for network administrators, or people who have a good knowledge of
TCP/IP networking concepts and topology, who want to want to configure the ZyWALL using
the web configurator.
1Read Chapter 1 on page 53 chapter for an overview of features available on the
ZyWALL.
2Read Chapter 3 on page 65 for web browser requirements and an introduction to the
main components, icons and menus in the ZyWALL web configurator.
3Read Chapter 4 on page 75 if you’re using the wizards for first time setup and you want
more detailed information than what the real time online help provides.
4It is highly recommended you read Chapter 5 on page 111 for detailed information on
essential terms used in the ZyWALL, what prerequisites are needed to configure a
feature and how to use that feature.
5It is highly recommended you read Chapter 6 on page 125 for multiple ZyWALL
application examples.
6Subsequent chapters are arranged by menu item as defined in the web configurator. Read
each chapter carefully for detailed information on that menu item.
Related Documentation
Quick Start Guide
The Quick Start Guide is designed to show you how to make the ZyWALL hardware
connections, rack mounting and access the web configurator wizards. (See the wizard real
time help for information on configuring each screen.) It contains a connection diagram,
default settings, handy checklists and information on setting up your network and
configuring for Internet access.
Configuration Reference Card
See this handy reference card to see what prerequisites are needed to configure a feature
and how to use this feature in the ZyWALL.
CLI Reference Guide
The CLI Reference Guide explains how to use the Command-Line Interface (CLI) to
configure the ZyWALL.
About This User's Guide
ZyWALL USG 300 User’s Guide
4
"It is recommended you use the web configurator to configure the ZyWALL.
Web Configurator Online Help
Click the help icon in any screen for help in configuring that screen and supplementary
information.
Supporting Disk
Refer to the included CD for support documents.
ZyXEL Web Site
Please refer to www.zyxel.com for additional support documentation and product
certifications.
User Guide Feedback
Help us help you. Send all User Guide-related comments, questions or suggestions for
improvement to the following address, or use e-mail instead. Thank you!
The Technical Writing Team,
ZyXEL Communications Corp.,
6 Innovation Road II,
Science-Based Industrial Park,
Hsinchu, 300, Taiwan.
Document Conventions
ZyWALL USG 300 User’s Guide 5
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this Users Guide.
1Warnings tell you about things that could harm you or your device.
"Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
The ZyWALL USG 300 may be referred to as the “ZyWALL”, the “device”, the “system”
or the “product” in this Users Guide.
Product labels, screen names, field labels and field choices are all in bold font.
A key stroke is denoted by square brackets and uppercase text, for example, [ENTER]
means the “enter” or “return” key on your keyboard.
“Enter” means for you to type one or more characters and then press the [ENTER] key.
“Select” or “choose” means for you to use one of the predefined choices.
A right angle bracket ( > ) within a screen name denotes a mouse click. For example,
Maintenance > Log > Log Setting means you first click Maintenance in the navigation
panel, then the Log sub menu and finally the Log Setting tab to get to that screen.
Units of measurement may denote the “metric” value or the “scientific” value. For
example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000”
or “1048576” and so on.
“e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”.
Document Conventions
ZyWALL USG 300 User’s Guide
6
Icons Used in Figures
Figures in this Users Guide may use the following generic icons. The ZyWALL icon is not an
exact representation of your device.
ZyWALL Computer Notebook computer
Server Firewall Telephone
Switch Router
Safety Warnings
ZyWALL USG 300 User’s Guide 7
Safety Warnings
1For your safety, be sure to read and follow all warning notices and instructions.
Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
Do NOT expose your device to dampness, dust or corrosive liquids.
Do NOT store things on the device.
Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.
Connect ONLY suitable accessories to the device.
Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel should
service or disassemble this device. Please contact your vendor for further information.
Make sure to connect the cables to the correct ports.
Place connecting cables carefully so that no one will step on them or stumble over them.
Always disconnect all cables from this device before servicing or disassembling.
Use ONLY an appropriate power adaptor or cord for your device. Connect it to the right
supply voltage (for example, 110V AC in North America or 230V AC in Europe).
Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
product where anyone can walk on the power adaptor or cord.
Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.
If the power adaptor or cord is damaged, remove it from the device and the power source.
Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.
Do not use the device outside, and make sure all the connections are indoors. There is a
remote risk of electric shock from lightning.
CAUTION: RISK OF EXPLOSION IF BATTERY (on the motherboard) IS REPLACED
BY AN INCORRECT TYPE. DISPOSE OF USED BATTERIES ACCORDING TO
THE INSTRUCTIONS. Dispose them at the applicable collection point for the recycling
of electrical and electronic equipment. For detailed information about recycling of this
product, please contact your local city office, your household waste disposal service or the
store where you purchased the product.
Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.
This product is recyclable. Dispose of it properly.
Safety Warnings
ZyWALL USG 300 User’s Guide
8
Contents Overview
ZyWALL USG 300 User’s Guide 9
Contents Overview
Introduction ............................................................................................................................51
Introducing the ZyWALL ............................................................................................................ 53
Features and Applications ......................................................................................................... 57
Web Configurator ....................................................................................................................... 65
Wizard Setup ............................................................................................................................. 75
Configuration Basics ................................................................................................................111
Tutorials ................................................................................................................................... 125
Status ...................................................................................................................................... 157
Registration ............................................................................................................................. 165
Update .....................................................................................................................................171
Network .................................................................................................................................177
Interface ................................................................................................................................... 179
Trunks ......................................................................................................................................219
Policy and Static Routes .......................................................................................................... 225
Routing Protocols ....................................................................................................................235
Zones ...................................................................................................................................... 245
DDNS ...................................................................................................................................... 249
Virtual Servers ......................................................................................................................... 255
HTTP Redirect ........................................................................................................................ 261
ALG .........................................................................................................................................265
Firewall and VPN ..................................................................................................................275
Firewall .................................................................................................................................. 277
IPSec VPN ...............................................................................................................................291
SSL VPN ................................................................................................................................. 323
SSL User Screens ................................................................................................................... 331
SSL User Application Screens ................................................................................................ 337
SSL User File Sharing Screens ...............................................................................................339
L2TP VPN ................................................................................................................................ 345
L2TP VPN Example ................................................................................................................. 351
Application Patrol & Anti-X .................................................................................................377
Application Patrol ..................................................................................................................... 379
Anti-Virus ................................................................................................................................. 403
IDP ..........................................................................................................................................417
ADP ........................................................................................................................................ 445
Contents Overview
ZyWALL USG 300 User’s Guide
10
Content Filter Screens ............................................................................................................. 463
Content Filter Reports .............................................................................................................483
Device HA & Objects ...........................................................................................................491
Device HA ............................................................................................................................... 493
User/Group ............................................................................................................................. 503
Addresses ...............................................................................................................................515
Services ...................................................................................................................................521
Schedules ................................................................................................................................ 527
AAA Server ............................................................................................................................. 531
Authentication Objects ............................................................................................................ 541
Certificates ............................................................................................................................... 545
ISP Accounts ........................................................................................................................... 563
SSL Application ....................................................................................................................... 567
System ..................................................................................................................................573
System .................................................................................................................................... 575
Service Control ....................................................................................................................... 587
Maintenance & Troubleshooting ........................................................................................613
File Manager ............................................................................................................................ 615
Logs ........................................................................................................................................ 625
Reports ................................................................................................................................... 637
Diagnostics ............................................................................................................................. 647
Reboot .....................................................................................................................................649
Troubleshooting ....................................................................................................................... 651
Appendices and Index .........................................................................................................653
Table of Contents
ZyWALL USG 300 User’s Guide 11
Table of Contents
About This User's Guide..........................................................................................................3
Document Conventions............................................................................................................5
Safety Warnings........................................................................................................................7
Contents Overview ...................................................................................................................9
Table of Contents....................................................................................................................11
List of Figures.........................................................................................................................31
List of Tables...........................................................................................................................43
Part I: Introduction................................................................................. 51
Chapter 1
Introducing the ZyWALL ........................................................................................................53
1.1 Overview and Key Default Settings ..................................................................................... 53
1.2 Front Panel LEDs ................................................................................................................ 53
1.3 Management Overview ........................................................................................................54
1.3.1 Web Configurator ....................................................................................................... 54
1.3.2 Command-Line Interface (CLI) ................................................................................... 55
1.3.3 Console Port .............................................................................................................. 55
1.4 Starting and Stopping the ZyWALL ...................................................................................... 55
Chapter 2
Features and Applications.....................................................................................................57
2.1 Features .............................................................................................................................. 57
2.2 Packet Flow ......................................................................................................................... 58
2.2.1 Interface to Interface (Through ZyWALL) ................................................................... 59
2.2.2 Interface to Interface (To/From ZyWALL) ................................................................... 59
2.2.3 Interface to Interface (From VPN Tunnel) .................................................................. 59
2.2.4 Interface to Interface (To VPN Tunnel) ....................................................................... 59
2.3 Applications ......................................................................................................................... 60
2.3.1 VPN Connectivity ....................................................................................................... 60
2.3.2 SSL VPN Network Access ......................................................................................... 60
2.3.3 User-Aware Access Control ....................................................................................... 61
2.3.4 Multiple WAN Interfaces ............................................................................................. 62
Table of Contents
ZyWALL USG 300 User’s Guide
12
2.3.5 Device HA .................................................................................................................. 62
Chapter 3
Web Configurator....................................................................................................................65
3.1 Web Configurator Requirements ......................................................................................... 65
3.2 Web Configurator Access ....................................................................................................65
3.3 Web Configurator Main Screen ........................................................................................... 67
3.3.1 Title Bar ...................................................................................................................... 67
3.3.2 Navigation Panel ........................................................................................................68
3.3.3 Main Window ..............................................................................................................71
3.3.4 Message Bar ..............................................................................................................72
Chapter 4
Wizard Setup...........................................................................................................................75
4.1 Wizard Setup Overview ....................................................................................................... 75
4.2 Installation Setup, One ISP ................................................................................................. 76
4.3 Step 1 Internet Access ........................................................................................................ 77
4.3.1 Ethernet: Auto IP Address Assignment ...................................................................... 78
4.3.2 Ethernet: Static IP Address Assignment .................................................................... 78
4.3.3 Step 2 Internet Access Ethernet ................................................................................ 80
4.3.4 PPPoE: Auto IP Address Assignment ........................................................................ 81
4.3.5 PPPoE: Static IP Address Assignment ...................................................................... 82
4.3.6 Step 2 Internet Access PPPoE .................................................................................. 84
4.3.7 PPTP: Auto IP Address Assignment .......................................................................... 85
4.3.8 PPTP: Static IP Address Assignment ......................................................................... 88
4.3.9 Step 2 Internet Access PPTP .................................................................................... 89
4.3.10 Step 4 Internet Access - Finish ............................................................................... 91
4.4 Device Registration .......................................................................................................... 91
4.5 Installation Setup, Two Internet Service Providers .............................................................. 93
4.5.1 Internet Access Wizard Setup Complete ................................................................... 95
4.6 VPN Setup ........................................................................................................................... 95
4.7 VPN Wizards ...................................................................................................................... 96
4.7.1 VPN Express Wizard .................................................................................................. 97
4.8 VPN Express Wizard - Remote Gateway ........................................................................... 97
4.8.1 VPN Express Wizard - Policy Setting ........................................................................ 99
4.8.2 VPN Express Wizard - Summary ............................................................................ 100
4.8.3 VPN Express Wizard - Finish .................................................................................. 101
4.8.4 VPN Advanced Wizard ............................................................................................. 101
4.8.5 VPN Advanced Wizard - Remote Gateway ............................................................. 103
4.8.6 VPN Advanced Wizard - Phase 1 ...........................................................................105
4.8.7 VPN Advanced Wizard - Phase 2 ...........................................................................107
4.8.8 VPN Advanced Wizard - Summary ......................................................................... 108
4.8.9 VPN Advanced Wizard - Finish ............................................................................... 109
Table of Contents
ZyWALL USG 300 User’s Guide 13
Chapter 5
Configuration Basics...........................................................................................................111
5.1 Granular Configuration .......................................................................................................111
5.2 Terminology in the ZyWALL ................................................................................................112
5.3 Physical Ports, Interfaces, and Zones ................................................................................112
5.3.1 Network Topology Example .......................................................................................113
5.4 Feature Configuration Overview ........................................................................................114
5.4.1 Feature ......................................................................................................................114
5.4.2 Interface ....................................................................................................................115
5.4.3 Trunks .......................................................................................................................115
5.4.4 IPSec VPN ................................................................................................................116
5.4.5 SSL VPN ...................................................................................................................116
5.4.6 L2TP VPN .................................................................................................................116
5.4.7 Zones ........................................................................................................................116
5.4.8 Device HA .................................................................................................................117
5.4.9 DDNS ........................................................................................................................117
5.4.10 Policy Routes ..........................................................................................................117
5.4.11 Static Routes ...........................................................................................................118
5.4.12 Firewall ....................................................................................................................118
5.4.13 Application Patrol ....................................................................................................119
5.4.14 Anti-Virus ................................................................................................................120
5.4.15 IDP ......................................................................................................................... 120
5.4.16 ADP ........................................................................................................................120
5.4.17 Content Filter ..........................................................................................................120
5.4.18 Virtual Server (Port Forwarding) ............................................................................ 121
5.4.19 HTTP Redirect .......................................................................................................121
5.4.20 ALG ........................................................................................................................122
5.5 Objects .............................................................................................................................. 122
5.5.1 User/Group ...............................................................................................................122
5.6 System Management and Maintenance ............................................................................ 123
5.6.1 DNS, WWW, SSH, TELNET, FTP, SNMP, Dial-in Mgmt, Vantage CNM ..................123
5.6.2 File Manager ............................................................................................................124
5.6.3 Licensing Registration .............................................................................................. 124
5.6.4 Licensing Update .....................................................................................................124
5.6.5 Logs and Reports ..................................................................................................... 124
5.6.6 Diagnostics ...............................................................................................................124
Chapter 6
Tutorials.................................................................................................................................125
6.1 Interfaces and Zones ......................................................................................................... 125
6.1.1 Set up Port Grouping ............................................................................................... 125
6.1.2 Set up Ethernet Interfaces ....................................................................................... 127
6.1.3 WAN Trunk ...............................................................................................................129
Table of Contents
ZyWALL USG 300 User’s Guide
14
6.1.4 Zones .......................................................................................................................130
6.2 IPSec VPN ......................................................................................................................... 132
6.2.1 Set up the Ethernet Interfaces and Zones ...............................................................132
6.2.2 Set up the VPN Gateway ......................................................................................... 132
6.2.3 Set up the VPN Connection ..................................................................................... 133
6.2.4 Set up the Policy Route for the VPN Tunnel ............................................................134
6.2.5 Set up the Zone for the VPN Tunnel ........................................................................135
6.3 Device HA .......................................................................................................................... 136
6.3.1 Set up DNS for the Virtual Router ............................................................................ 136
6.3.2 Set up the VRRP Groups on the Master .................................................................. 136
6.3.3 Set up the Password for Synchronization ................................................................ 138
6.3.4 Finish Configuring the Master .................................................................................. 139
6.3.5 Set up the Ethernet Interfaces on the Backup .........................................................139
6.3.6 Set up the VRRP Groups on the Backup ................................................................. 139
6.3.7 Synchronize the Backup .......................................................................................... 140
6.4 User-Aware Access Control ............................................................................................... 140
6.4.1 Set up User Accounts .............................................................................................. 141
6.4.2 Set up User Groups ................................................................................................. 141
6.4.3 Set up User Authentication Using the RADIUS Server ............................................ 142
6.4.4 Set up Web Surfing Policies With Bandwidth Restrictions .......................................143
6.4.5 Set up MSN Policies ................................................................................................ 144
6.4.6 Set up LAN-to-DMZ Policies .................................................................................... 145
6.5 Trunks ................................................................................................................................ 146
6.5.1 Set up Available Bandwidth on Ethernet Interfaces ................................................. 146
6.5.2 Change WAN Trunk Algorithm ................................................................................. 147
6.6 NAT 1:1 Example ...............................................................................................................147
6.6.1 NAT 1:1 Address Objects ......................................................................................... 148
6.6.2 NAT 1:1 Virtual Server .............................................................................................. 149
6.6.3 NAT 1:1 Policy Route ............................................................................................... 149
6.6.4 NAT 1:1 Firewall Rule .............................................................................................. 150
6.7 NAT Loopback ...................................................................................................................151
6.7.1 NAT Loopback Virtual Server ................................................................................... 152
6.7.2 NAT Loopback Policy Route .................................................................................... 153
6.8 Service Control and the Firewall ........................................................................................ 155
6.8.1 Allowing HTTPS Administrator Access Only From the LAN .................................... 155
Chapter 7
Status....................................................................................................................................157
7.1 Status Screen .................................................................................................................... 157
7.2 VPN Status ........................................................................................................................ 160
7.3 DHCP Table .......................................................................................................................161
7.4 Port Statistics .................................................................................................................... 162
7.5 Current Users .................................................................................................................... 163
Table of Contents
ZyWALL USG 300 User’s Guide 15
Chapter 8
Registration...........................................................................................................................165
8.1 myZyXEL.com Overview ................................................................................................... 165
8.1.1 Subscription Services Available on the ZyWALL ..................................................... 165
8.2 Registration ....................................................................................................................... 166
8.3 Service .............................................................................................................................. 168
Chapter 9
Update....................................................................................................................................171
9.1 Updating Anti-virus Signatures .......................................................................................... 171
9.2 Updating IDP and Application Patrol Signatures .............................................................. 173
9.3 Updating System Protect Signatures ................................................................................ 175
Part II: Network..................................................................................... 177
Chapter 10
Interface.................................................................................................................................179
10.1 Interface Overview ........................................................................................................... 179
10.1.1 Types of Interfaces ................................................................................................. 179
10.1.2 IP Address Assignment .......................................................................................... 180
10.1.3 Interface Parameters ..............................................................................................182
10.1.4 DHCP Settings ....................................................................................................... 182
10.1.5 Ping Check Settings ............................................................................................... 183
10.1.6 Relationships Between Interfaces .......................................................................... 184
10.2 Ethernet Interfaces ..........................................................................................................184
10.2.1 Ethernet Interfaces Overview ................................................................................. 184
10.2.2 Interface Summary Screen .................................................................................... 185
10.2.3 Ethernet Summary Screen ..................................................................................... 188
10.2.4 Ethernet Edit .........................................................................................................189
10.3 Port Grouping ................................................................................................................. 194
10.3.1 Port Grouping Overview .........................................................................................194
10.3.2 Port Grouping Screen ............................................................................................ 195
10.4 VLAN Interfaces ............................................................................................................. 196
10.4.1 VLAN Overview ...................................................................................................... 196
10.4.2 VLAN Interfaces Overview ..................................................................................... 198
10.4.3 VLAN Summary Screen ......................................................................................... 198
10.4.4 VLAN Add/Edit ......................................................................................................199
10.5 Bridge Interfaces ............................................................................................................ 203
10.5.1 Bridge Overview ..................................................................................................... 204
10.5.2 Bridge Interface Overview ...................................................................................... 205
10.5.3 Bridge Summary .................................................................................................... 205
Table of Contents
ZyWALL USG 300 User’s Guide
16
10.5.4 Bridge Add/Edit ..................................................................................................... 206
10.6 PPPoE/PPTP Interfaces .................................................................................................210
10.6.1 PPPoE/PPTP Overview .........................................................................................210
10.6.2 PPPoE/PPTP Interfaces Overview .........................................................................211
10.6.3 PPPoE/PPTP Interface Summary .......................................................................... 212
10.6.4 PPPoE/PPTP Interface Add/Edit ........................................................................... 213
10.7 Auxiliary Interface ........................................................................................................... 215
10.7.1 Auxiliary Interface Overview ................................................................................... 215
10.7.2 Auxiliary ..................................................................................................................215
10.8 Virtual Interfaces ............................................................................................................. 217
10.8.1 Virtual Interfaces Add/Edit ...................................................................................... 217
Chapter 11
Trunks....................................................................................................................................219
11.1 Trunks Overview .............................................................................................................. 219
11.2 Trunk Scenario Examples ................................................................................................219
11.3 Load Balancing Introduction ............................................................................................ 219
11.4 Load Balancing Algorithms ..............................................................................................220
11.4.1 Least Load First ...................................................................................................... 220
11.4.2 Weighted Round Robin ..........................................................................................221
11.4.3 Spillover ..................................................................................................................221
11.5 Trunk Summary ............................................................................................................... 222
11.6 Configuring a Trunk ........................................................................................................222
Chapter 12
Policy and Static Routes......................................................................................................225
12.1 Policy Route ....................................................................................................................225
12.1.1 Benefits .................................................................................................................. 225
12.2 Routing Policy ..................................................................................................................225
12.2.1 NAT and SNAT ....................................................................................................... 226
12.2.2 Port Triggering ....................................................................................................... 226
12.2.3 Maximize Bandwidth Usage ................................................................................... 227
12.2.4 Reserving Bandwidth for Non-Bandwidth Class Traffic .......................................... 227
12.3 IP Routing Policy Setup ...................................................................................................227
12.4 Policy Route Edit ............................................................................................................ 229
12.5 IP Static Routes .............................................................................................................. 232
12.6 Static Route Summary ..................................................................................................... 233
12.7 Edit a Static Route .......................................................................................................... 233
Chapter 13
Routing Protocols.................................................................................................................235
13.1 Routing Protocols Overview ............................................................................................235
13.1.1 RIP Overview ......................................................................................................... 235
Table of Contents
ZyWALL USG 300 User’s Guide 17
13.1.2 Authentication Types .............................................................................................. 236
13.2 RIP Screen ...................................................................................................................... 236
13.3 OSPF Overview .............................................................................................................. 237
13.3.1 OSPF Areas ........................................................................................................... 238
13.3.2 OSPF Routers ........................................................................................................ 239
13.3.3 Virtual Links ............................................................................................................240
13.3.4 OSPF Configuration ............................................................................................... 240
13.4 OSPF Screens .................................................................................................................241
13.4.1 OSPF Summary ..................................................................................................... 241
13.4.2 OSPF Area Add/Edit .............................................................................................242
Chapter 14
Zones ....................................................................................................................................245
14.1 Zones Overview ...............................................................................................................245
14.1.1 Effect of Zones on Different Types of Traffic .......................................................... 245
14.2 Zone Summary ................................................................................................................ 246
14.3 Zone Add/Edit ................................................................................................................. 247
Chapter 15
DDNS......................................................................................................................................249
15.1 DDNS Overview ..............................................................................................................249
15.1.1 DYNDNS Wildcard ................................................................................................. 249
15.1.2 High Availability (HA) ............................................................................................. 250
15.1.3 Mail Exchanger ......................................................................................................250
15.2 DDNS Screens ................................................................................................................ 250
15.3 DDNS Summary ..............................................................................................................251
15.4 Dynamic DNS Add/Edit .................................................................................................. 252
Chapter 16
Virtual Servers.......................................................................................................................255
16.1 Virtual Server Overview ...................................................................................................255
16.2 Virtual Server Example ....................................................................................................256
16.3 Virtual Server Screens ..................................................................................................... 256
16.4 Virtual Server Summary Screen ...................................................................................... 256
16.4.1 Virtual Server Add/Edit .......................................................................................... 258
Chapter 17
HTTP Redirect......................................................................................................................261
17.1 HTTP Redirect Overview ................................................................................................. 261
17.1.1 Web Proxy Server .................................................................................................. 261
17.2 HTTP Redirect, Firewall and Policy Route ...................................................................... 261
17.3 Configuring HTTP Redirect ............................................................................................. 262
17.4 HTTP Redirect Edit ......................................................................................................... 263
Table of Contents
ZyWALL USG 300 User’s Guide
18
Chapter 18
ALG ........................................................................................................................................265
18.1 ALG Introduction .............................................................................................................. 265
18.1.1 Application Layer Gateway (ALG) and NAT ...........................................................265
18.1.2 ALG and Trunks ..................................................................................................... 265
18.1.3 FTP ........................................................................................................................ 266
18.1.4 H.323 ......................................................................................................................266
18.1.5 RTP ........................................................................................................................ 266
18.1.6 SIP ......................................................................................................................... 267
18.2 Peer-to-Peer Calls and the ZyWALL ............................................................................... 268
18.2.1 VoIP Calls from the WAN with Multiple Outgoing Calls .......................................... 268
18.2.2 VoIP with Multiple WAN IP Addresses ................................................................... 268
18.3 ALG Screen ..................................................................................................................... 269
18.4 WAN to LAN SIP Peer-to-peer Calls Example ................................................................271
Part III: Firewall and VPN..................................................................... 275
Chapter 19
Firewall.................................................................................................................................277
19.1 Firewall Overview ............................................................................................................ 277
19.2 Firewall Rules .................................................................................................................. 278
19.2.1 Rule Directions ....................................................................................................... 278
19.2.2 Firewall and VPN Traffic ......................................................................................... 280
19.3 Firewall Rule Example Applications ................................................................................ 280
19.4 Alerts ............................................................................................................................... 283
19.5 Asymmetrical Routes .......................................................................................................283
19.5.1 Virtual Interfaces and Asymmetrical Routes ..........................................................283
19.6 Configuring the Firewall ...................................................................................................284
19.6.1 Edit a Firewall Rule ................................................................................................286
19.7 Firewall Rule Configuration Example .............................................................................. 287
Chapter 20
IPSec VPN..............................................................................................................................291
20.1 IPSec VPN Overview ....................................................................................................... 291
20.1.1 IPSec SA Overview ................................................................................................ 292
20.1.2 Additional Topics for IPSec SA ............................................................................... 294
20.2 VPN Related Configuration ............................................................................................. 296
20.3 VPN Connection Screens ................................................................................................ 297
20.3.1 VPN Connection Summary .................................................................................... 297
20.3.2 VPN Connection Add/Edit IKE .............................................................................. 298
20.3.3 VPN Connection Add/Edit Manual Key .................................................................. 302
Table of Contents
ZyWALL USG 300 User’s Guide 19
20.4 VPN Gateway Screens ................................................................................................... 306
20.4.1 IKE SA Overview .................................................................................................... 306
20.4.2 Additional Topics for IKE SA .................................................................................. 310
20.4.3 VPN Gateway Summary ........................................................................................ 312
20.4.4 VPN Gateway Add/Edit ......................................................................................... 313
20.5 VPN Concentrator ...........................................................................................................318
20.5.1 VPN Concentrator Summary .................................................................................. 319
20.5.2 VPN Concentrator Add/Edit ..................................................................................319
20.6 SA Monitor Screen .........................................................................................................320
20.6.1 Regular Expressions in Searching IPSec SAs by Name or Policy .........................322
Chapter 21
SSL VPN.................................................................................................................................323
21.1 SSL Access Policy ...........................................................................................................323
21.1.1 SSL Access Policy Objects .................................................................................... 323
21.1.2 SSL Access Policy Limitations ............................................................................... 324
21.2 SSL Access Privilege List ................................................................................................324
21.3 Creating/Editing an SSL Access Policy .......................................................................... 325
21.4 SSL Connection Monitor .................................................................................................. 326
21.5 Configuring SSL Global Setting ....................................................................................... 327
21.5.1 Uploading a Custom Logo ...................................................................................... 329
21.6 Establishing an SSL VPN Connection ............................................................................. 329
Chapter 22
SSL User Screens.................................................................................................................331
22.1 Overview .......................................................................................................................... 331
22.1.1 Network Resource Access Methods ...................................................................... 331
22.1.2 System Requirements ............................................................................................ 331
22.1.3 Information You Need ............................................................................................ 332
22.1.4 Certificates .............................................................................................................332
22.2 Remote User Login ..........................................................................................................332
22.3 SSL VPN User Screens ................................................................................................... 334
22.4 Bookmark ........................................................................................................................ 335
22.5 Logout .............................................................................................................................. 335
Chapter 23
SSL User Application Screens ............................................................................................337
23.1 Overview .......................................................................................................................... 337
23.1.1 The Application Screen .......................................................................................... 337
Chapter 24
SSL User File Sharing Screens ...........................................................................................339
24.1 Overview .......................................................................................................................... 339
Table of Contents
ZyWALL USG 300 User’s Guide
20
24.2 Main File Sharing Screen ................................................................................................339
24.3 Opening a File or Folder ..................................................................................................340
24.3.1 Downloading a File ................................................................................................. 341
24.3.2 Saving a File ..........................................................................................................341
24.4 Creating a New Folder .....................................................................................................342
24.5 Renaming a File or Folder ............................................................................................... 342
24.6 Deleting a File or Folder ..................................................................................................343
24.7 Uploading a File ............................................................................................................... 344
Chapter 25
L2TP VPN...............................................................................................................................345
25.1 L2TP VPN Overview ........................................................................................................ 345
25.2 IPSec Configuration .........................................................................................................345
25.2.1 Using the Default L2TP VPN Connection .............................................................. 346
25.3 Policy Route ....................................................................................................................346
25.4 L2TP VPN Configuration ................................................................................................. 347
25.5 L2TP VPN Session Monitor ............................................................................................. 348
Chapter 26
L2TP VPN Example...............................................................................................................351
26.1 L2TP VPN Example .........................................................................................................351
26.2 Configuring the Default L2TP VPN Gateway Example .................................................... 351
26.3 Configuring the Default L2TP VPN Connection Example ................................................ 353
26.4 Configuring the L2TP VPN Settings Example .................................................................354
26.5 Configuring the Policy Route for L2TP Example ............................................................. 354
26.6 Configuring L2TP VPN in Windows XP and 2000 ........................................................... 355
26.6.1 Configuring L2TP in Windows XP .......................................................................... 356
26.6.2 Configuring L2TP in Windows 2000 ....................................................................... 361
Part IV: Application Patrol & Anti-X.................................................... 377
Chapter 27
Application Patrol.................................................................................................................379
27.1 Application Patrol Overview ............................................................................................. 379
27.2 Classification of Applications ...........................................................................................379
27.3 Configurable Application Policies .................................................................................... 380
27.4 Bandwidth Management .................................................................................................. 380
27.4.1 Connection and Packet Directions ......................................................................... 381
27.4.2 Outbound and Inbound Bandwidth Limits .............................................................. 381
27.4.3 Bandwidth Management Priority ............................................................................ 382
27.4.4 Maximize Bandwidth Usage ................................................................................... 382
  • Page 1 1
  • Page 2 2
  • Page 3 3
  • Page 4 4
  • Page 5 5
  • Page 6 6
  • Page 7 7
  • Page 8 8
  • Page 9 9
  • Page 10 10
  • Page 11 11
  • Page 12 12
  • Page 13 13
  • Page 14 14
  • Page 15 15
  • Page 16 16
  • Page 17 17
  • Page 18 18
  • Page 19 19
  • Page 20 20
  • Page 21 21
  • Page 22 22
  • Page 23 23
  • Page 24 24
  • Page 25 25
  • Page 26 26
  • Page 27 27
  • Page 28 28
  • Page 29 29
  • Page 30 30
  • Page 31 31
  • Page 32 32
  • Page 33 33
  • Page 34 34
  • Page 35 35
  • Page 36 36
  • Page 37 37
  • Page 38 38
  • Page 39 39
  • Page 40 40
  • Page 41 41
  • Page 42 42
  • Page 43 43
  • Page 44 44
  • Page 45 45
  • Page 46 46
  • Page 47 47
  • Page 48 48
  • Page 49 49
  • Page 50 50
  • Page 51 51
  • Page 52 52
  • Page 53 53
  • Page 54 54
  • Page 55 55
  • Page 56 56
  • Page 57 57
  • Page 58 58
  • Page 59 59
  • Page 60 60
  • Page 61 61
  • Page 62 62
  • Page 63 63
  • Page 64 64
  • Page 65 65
  • Page 66 66
  • Page 67 67
  • Page 68 68
  • Page 69 69
  • Page 70 70
  • Page 71 71
  • Page 72 72
  • Page 73 73
  • Page 74 74
  • Page 75 75
  • Page 76 76
  • Page 77 77
  • Page 78 78
  • Page 79 79
  • Page 80 80
  • Page 81 81
  • Page 82 82
  • Page 83 83
  • Page 84 84
  • Page 85 85
  • Page 86 86
  • Page 87 87
  • Page 88 88
  • Page 89 89
  • Page 90 90
  • Page 91 91
  • Page 92 92
  • Page 93 93
  • Page 94 94
  • Page 95 95
  • Page 96 96
  • Page 97 97
  • Page 98 98
  • Page 99 99
  • Page 100 100
  • Page 101 101
  • Page 102 102
  • Page 103 103
  • Page 104 104
  • Page 105 105
  • Page 106 106
  • Page 107 107
  • Page 108 108
  • Page 109 109
  • Page 110 110
  • Page 111 111
  • Page 112 112
  • Page 113 113
  • Page 114 114
  • Page 115 115
  • Page 116 116
  • Page 117 117
  • Page 118 118
  • Page 119 119
  • Page 120 120
  • Page 121 121
  • Page 122 122
  • Page 123 123
  • Page 124 124
  • Page 125 125
  • Page 126 126
  • Page 127 127
  • Page 128 128
  • Page 129 129
  • Page 130 130
  • Page 131 131
  • Page 132 132
  • Page 133 133
  • Page 134 134
  • Page 135 135
  • Page 136 136
  • Page 137 137
  • Page 138 138
  • Page 139 139
  • Page 140 140
  • Page 141 141
  • Page 142 142
  • Page 143 143
  • Page 144 144
  • Page 145 145
  • Page 146 146
  • Page 147 147
  • Page 148 148
  • Page 149 149
  • Page 150 150
  • Page 151 151
  • Page 152 152
  • Page 153 153
  • Page 154 154
  • Page 155 155
  • Page 156 156
  • Page 157 157
  • Page 158 158
  • Page 159 159
  • Page 160 160
  • Page 161 161
  • Page 162 162
  • Page 163 163
  • Page 164 164
  • Page 165 165
  • Page 166 166
  • Page 167 167
  • Page 168 168
  • Page 169 169
  • Page 170 170
  • Page 171 171
  • Page 172 172
  • Page 173 173
  • Page 174 174
  • Page 175 175
  • Page 176 176
  • Page 177 177
  • Page 178 178
  • Page 179 179
  • Page 180 180
  • Page 181 181
  • Page 182 182
  • Page 183 183
  • Page 184 184
  • Page 185 185
  • Page 186 186
  • Page 187 187
  • Page 188 188
  • Page 189 189
  • Page 190 190
  • Page 191 191
  • Page 192 192
  • Page 193 193
  • Page 194 194
  • Page 195 195
  • Page 196 196
  • Page 197 197
  • Page 198 198
  • Page 199 199
  • Page 200 200
  • Page 201 201
  • Page 202 202
  • Page 203 203
  • Page 204 204
  • Page 205 205
  • Page 206 206
  • Page 207 207
  • Page 208 208
  • Page 209 209
  • Page 210 210
  • Page 211 211
  • Page 212 212
  • Page 213 213
  • Page 214 214
  • Page 215 215
  • Page 216 216
  • Page 217 217
  • Page 218 218
  • Page 219 219
  • Page 220 220
  • Page 221 221
  • Page 222 222
  • Page 223 223
  • Page 224 224
  • Page 225 225
  • Page 226 226
  • Page 227 227
  • Page 228 228
  • Page 229 229
  • Page 230 230
  • Page 231 231
  • Page 232 232
  • Page 233 233
  • Page 234 234
  • Page 235 235
  • Page 236 236
  • Page 237 237
  • Page 238 238
  • Page 239 239
  • Page 240 240
  • Page 241 241
  • Page 242 242
  • Page 243 243
  • Page 244 244
  • Page 245 245
  • Page 246 246
  • Page 247 247
  • Page 248 248
  • Page 249 249
  • Page 250 250
  • Page 251 251
  • Page 252 252
  • Page 253 253
  • Page 254 254
  • Page 255 255
  • Page 256 256
  • Page 257 257
  • Page 258 258
  • Page 259 259
  • Page 260 260
  • Page 261 261
  • Page 262 262
  • Page 263 263
  • Page 264 264
  • Page 265 265
  • Page 266 266
  • Page 267 267
  • Page 268 268
  • Page 269 269
  • Page 270 270
  • Page 271 271
  • Page 272 272
  • Page 273 273
  • Page 274 274
  • Page 275 275
  • Page 276 276
  • Page 277 277
  • Page 278 278
  • Page 279 279
  • Page 280 280
  • Page 281 281
  • Page 282 282
  • Page 283 283
  • Page 284 284
  • Page 285 285
  • Page 286 286
  • Page 287 287
  • Page 288 288
  • Page 289 289
  • Page 290 290
  • Page 291 291
  • Page 292 292
  • Page 293 293
  • Page 294 294
  • Page 295 295
  • Page 296 296
  • Page 297 297
  • Page 298 298
  • Page 299 299
  • Page 300 300
  • Page 301 301
  • Page 302 302
  • Page 303 303
  • Page 304 304
  • Page 305 305
  • Page 306 306
  • Page 307 307
  • Page 308 308
  • Page 309 309
  • Page 310 310
  • Page 311 311
  • Page 312 312
  • Page 313 313
  • Page 314 314
  • Page 315 315
  • Page 316 316
  • Page 317 317
  • Page 318 318
  • Page 319 319
  • Page 320 320
  • Page 321 321
  • Page 322 322
  • Page 323 323
  • Page 324 324
  • Page 325 325
  • Page 326 326
  • Page 327 327
  • Page 328 328
  • Page 329 329
  • Page 330 330
  • Page 331 331
  • Page 332 332
  • Page 333 333
  • Page 334 334
  • Page 335 335
  • Page 336 336
  • Page 337 337
  • Page 338 338
  • Page 339 339
  • Page 340 340
  • Page 341 341
  • Page 342 342
  • Page 343 343
  • Page 344 344
  • Page 345 345
  • Page 346 346
  • Page 347 347
  • Page 348 348
  • Page 349 349
  • Page 350 350
  • Page 351 351
  • Page 352 352
  • Page 353 353
  • Page 354 354
  • Page 355 355
  • Page 356 356
  • Page 357 357
  • Page 358 358
  • Page 359 359
  • Page 360 360
  • Page 361 361
  • Page 362 362
  • Page 363 363
  • Page 364 364
  • Page 365 365
  • Page 366 366
  • Page 367 367
  • Page 368 368
  • Page 369 369
  • Page 370 370
  • Page 371 371
  • Page 372 372
  • Page 373 373
  • Page 374 374
  • Page 375 375
  • Page 376 376
  • Page 377 377
  • Page 378 378
  • Page 379 379
  • Page 380 380
  • Page 381 381
  • Page 382 382
  • Page 383 383
  • Page 384 384
  • Page 385 385
  • Page 386 386
  • Page 387 387
  • Page 388 388
  • Page 389 389
  • Page 390 390
  • Page 391 391
  • Page 392 392
  • Page 393 393
  • Page 394 394
  • Page 395 395
  • Page 396 396
  • Page 397 397
  • Page 398 398
  • Page 399 399
  • Page 400 400
  • Page 401 401
  • Page 402 402
  • Page 403 403
  • Page 404 404
  • Page 405 405
  • Page 406 406
  • Page 407 407
  • Page 408 408
  • Page 409 409
  • Page 410 410
  • Page 411 411
  • Page 412 412
  • Page 413 413
  • Page 414 414
  • Page 415 415
  • Page 416 416
  • Page 417 417
  • Page 418 418
  • Page 419 419
  • Page 420 420
  • Page 421 421
  • Page 422 422
  • Page 423 423
  • Page 424 424
  • Page 425 425
  • Page 426 426
  • Page 427 427
  • Page 428 428
  • Page 429 429
  • Page 430 430
  • Page 431 431
  • Page 432 432
  • Page 433 433
  • Page 434 434
  • Page 435 435
  • Page 436 436
  • Page 437 437
  • Page 438 438
  • Page 439 439
  • Page 440 440
  • Page 441 441
  • Page 442 442
  • Page 443 443
  • Page 444 444
  • Page 445 445
  • Page 446 446
  • Page 447 447
  • Page 448 448
  • Page 449 449
  • Page 450 450
  • Page 451 451
  • Page 452 452
  • Page 453 453
  • Page 454 454
  • Page 455 455
  • Page 456 456
  • Page 457 457
  • Page 458 458
  • Page 459 459
  • Page 460 460
  • Page 461 461
  • Page 462 462
  • Page 463 463
  • Page 464 464
  • Page 465 465
  • Page 466 466
  • Page 467 467
  • Page 468 468
  • Page 469 469
  • Page 470 470
  • Page 471 471
  • Page 472 472
  • Page 473 473
  • Page 474 474
  • Page 475 475
  • Page 476 476
  • Page 477 477
  • Page 478 478
  • Page 479 479
  • Page 480 480
  • Page 481 481
  • Page 482 482
  • Page 483 483
  • Page 484 484
  • Page 485 485
  • Page 486 486
  • Page 487 487
  • Page 488 488
  • Page 489 489
  • Page 490 490
  • Page 491 491
  • Page 492 492
  • Page 493 493
  • Page 494 494
  • Page 495 495
  • Page 496 496
  • Page 497 497
  • Page 498 498
  • Page 499 499
  • Page 500 500
  • Page 501 501
  • Page 502 502
  • Page 503 503
  • Page 504 504
  • Page 505 505
  • Page 506 506
  • Page 507 507
  • Page 508 508
  • Page 509 509
  • Page 510 510
  • Page 511 511
  • Page 512 512
  • Page 513 513
  • Page 514 514
  • Page 515 515
  • Page 516 516
  • Page 517 517
  • Page 518 518
  • Page 519 519
  • Page 520 520
  • Page 521 521
  • Page 522 522
  • Page 523 523
  • Page 524 524
  • Page 525 525
  • Page 526 526
  • Page 527 527
  • Page 528 528
  • Page 529 529
  • Page 530 530
  • Page 531 531
  • Page 532 532
  • Page 533 533
  • Page 534 534
  • Page 535 535
  • Page 536 536
  • Page 537 537
  • Page 538 538
  • Page 539 539
  • Page 540 540
  • Page 541 541
  • Page 542 542
  • Page 543 543
  • Page 544 544
  • Page 545 545
  • Page 546 546
  • Page 547 547
  • Page 548 548
  • Page 549 549
  • Page 550 550
  • Page 551 551
  • Page 552 552
  • Page 553 553
  • Page 554 554
  • Page 555 555
  • Page 556 556
  • Page 557 557
  • Page 558 558
  • Page 559 559
  • Page 560 560
  • Page 561 561
  • Page 562 562
  • Page 563 563
  • Page 564 564
  • Page 565 565
  • Page 566 566
  • Page 567 567
  • Page 568 568
  • Page 569 569
  • Page 570 570
  • Page 571 571
  • Page 572 572
  • Page 573 573
  • Page 574 574
  • Page 575 575
  • Page 576 576
  • Page 577 577
  • Page 578 578
  • Page 579 579
  • Page 580 580
  • Page 581 581
  • Page 582 582
  • Page 583 583
  • Page 584 584
  • Page 585 585
  • Page 586 586
  • Page 587 587
  • Page 588 588
  • Page 589 589
  • Page 590 590
  • Page 591 591
  • Page 592 592
  • Page 593 593
  • Page 594 594
  • Page 595 595
  • Page 596 596
  • Page 597 597
  • Page 598 598
  • Page 599 599
  • Page 600 600
  • Page 601 601
  • Page 602 602
  • Page 603 603
  • Page 604 604
  • Page 605 605
  • Page 606 606
  • Page 607 607
  • Page 608 608
  • Page 609 609
  • Page 610 610
  • Page 611 611
  • Page 612 612
  • Page 613 613
  • Page 614 614
  • Page 615 615
  • Page 616 616
  • Page 617 617
  • Page 618 618
  • Page 619 619
  • Page 620 620
  • Page 621 621
  • Page 622 622
  • Page 623 623
  • Page 624 624
  • Page 625 625
  • Page 626 626
  • Page 627 627
  • Page 628 628
  • Page 629 629
  • Page 630 630
  • Page 631 631
  • Page 632 632
  • Page 633 633
  • Page 634 634
  • Page 635 635
  • Page 636 636
  • Page 637 637
  • Page 638 638
  • Page 639 639
  • Page 640 640
  • Page 641 641
  • Page 642 642
  • Page 643 643
  • Page 644 644
  • Page 645 645
  • Page 646 646
  • Page 647 647
  • Page 648 648
  • Page 649 649
  • Page 650 650
  • Page 651 651
  • Page 652 652
  • Page 653 653
  • Page 654 654
  • Page 655 655
  • Page 656 656
  • Page 657 657
  • Page 658 658
  • Page 659 659
  • Page 660 660
  • Page 661 661
  • Page 662 662
  • Page 663 663
  • Page 664 664
  • Page 665 665
  • Page 666 666
  • Page 667 667
  • Page 668 668
  • Page 669 669
  • Page 670 670
  • Page 671 671
  • Page 672 672
  • Page 673 673
  • Page 674 674
  • Page 675 675
  • Page 676 676
  • Page 677 677
  • Page 678 678
  • Page 679 679
  • Page 680 680
  • Page 681 681
  • Page 682 682
  • Page 683 683
  • Page 684 684
  • Page 685 685
  • Page 686 686
  • Page 687 687
  • Page 688 688
  • Page 689 689
  • Page 690 690
  • Page 691 691
  • Page 692 692
  • Page 693 693
  • Page 694 694
  • Page 695 695
  • Page 696 696
  • Page 697 697
  • Page 698 698
  • Page 699 699
  • Page 700 700
  • Page 701 701
  • Page 702 702
  • Page 703 703
  • Page 704 704
  • Page 705 705
  • Page 706 706
  • Page 707 707
  • Page 708 708
  • Page 709 709
  • Page 710 710
  • Page 711 711
  • Page 712 712
  • Page 713 713
  • Page 714 714
  • Page 715 715
  • Page 716 716
  • Page 717 717
  • Page 718 718
  • Page 719 719
  • Page 720 720
  • Page 721 721
  • Page 722 722
  • Page 723 723
  • Page 724 724
  • Page 725 725
  • Page 726 726
  • Page 727 727
  • Page 728 728
  • Page 729 729
  • Page 730 730
  • Page 731 731
  • Page 732 732
  • Page 733 733
  • Page 734 734
  • Page 735 735
  • Page 736 736
  • Page 737 737
  • Page 738 738
  • Page 739 739
  • Page 740 740
  • Page 741 741
  • Page 742 742
  • Page 743 743
  • Page 744 744
  • Page 745 745
  • Page 746 746
  • Page 747 747
  • Page 748 748
  • Page 749 749
  • Page 750 750
  • Page 751 751
  • Page 752 752
  • Page 753 753
  • Page 754 754
  • Page 755 755
  • Page 756 756
  • Page 757 757
  • Page 758 758
  • Page 759 759
  • Page 760 760
  • Page 761 761
  • Page 762 762
  • Page 763 763
  • Page 764 764
  • Page 765 765
  • Page 766 766
  • Page 767 767
  • Page 768 768
  • Page 769 769
  • Page 770 770
  • Page 771 771
  • Page 772 772
  • Page 773 773
  • Page 774 774
  • Page 775 775
  • Page 776 776
  • Page 777 777
  • Page 778 778

ZyXEL ZYWALL USG 300 Owner's manual

Category
Routers
Type
Owner's manual

Ask a question and I''ll find the answer in the document

Finding information in a document is now easier with AI