ZyXEL Communications ZyWALL 70 Manuel utilisateur

ZyWALL 70

Internet Security Gateway

Quick Start Guide

Version 3.64

3/2005

Table of Contents

ENGLISH 1

DEUTSCH 23

ESPAÑOL 47

FRANÇAIS 71

ITALIANO 95

中文 119

ENGLISH

Overview

The ZyWALL 70 is a load-balancing, dual WAN firewall with VPN, bandwidth management, content filtering

and many other features. You can use it as a transparent firewall and not reconfigure your network nor

configure the ZyWALL’s routing features. The ZyWALL increases network security by providing DMZ ports for

use with publicly accessible servers. This guide covers the initial connections and configuration needed to

start using the ZyWALL in your network.

See the User’s Guide for more information on all features.

You may need your Internet access information.

This guide is divided into the following sections.

1 Hardware Connections

You need the following.

1Hardware Connections

2Accessing the Web Configurator

3Bridge Mode

4Internet Access Setup

5DNS

6NAT

7Firewall

8VPN Rule Setup

9myZyXEL.com Product Registration

10External Database Content Filtering

11Troubleshooting

ZyWALL Computer Ethernet Cables Power Cord

ENGLISH

Do the following to make hardware connections for initial setup.

1Use an Ethernet cable to connect the LAN port to a computer. You can also use Ethernet cables to

connect public servers (web, e-mail, FTP, etc.) to the DMZ ports.

2Use another Ethernet cable(s) to connect the WAN 1 and/or WAN 2 port to an Ethernet jack with Internet

access.

3Use the included power cord to connect the power socket (on the rear panel) to a power outlet

4Push the power switch to the on position and look at the front panel. The PWR LED turns on. The SYS

LED blinks while performing system testing and then stays on if the testing is successful. The ACT, CARD,

LAN, DMZ, and WAN LEDs turn on and stay on if the corresponding connections are properly made.

ENGLISH

2 Accessing the Web Configurator

Use this section to configure the WAN 1 interface for Internet access.

5The HOME screen opens.

The ZyWALL is in router mode by default. Continue to the next step if you want to use routing features

such as NAT, DHCP and VPN.

Go to Section 3 if you prefer to use the ZyWALL as a transparent firewall.

1Launch your web browser. Enter 192.168.1.1 (the

ZyWALL’s default IP address) as the address.

If the login screen does not display, see Section

11.1 to set your computer’s IP address.

2Click Login (the default password 1234 is already

entered).

3Change the login password by entering a new

password and clicking Apply.

4Click Apply to replace the ZyWALL’s default

digital certificate.

ENGLISH

3 Bridge Mode

When you set the ZyWALL to bridge mode, it functions as a transparent firewall. Do the following to set the

ZyWALL to bridge mode.

6Check the Network

Status table. If the

WAN 1 status is not

Down and there is an

IP address, go to

Section 5.

If the WAN 1 status is

Down (or there is not

an IP address), click

Internet Access and

use Section 4 to

configure WAN 1.

Use the NETWORK

WAN screens if you

need to configure

WAN 2. You can also

configure load

balancing between the

WAN ports.

ENGLISH

4 Internet Access Setup

Enter the Internet access information exactly as given to you.

If you were given an IP address to use, select Static in the IP Address Assignment drop-down list box and

enter the information provided.

Note: The fields vary depending on what you select in the Encapsulation field. Fill them in with the

information provided by the ISP or network administrator.

Click Finish when you are done.

1Click MAINTENANCE in

the navigation panel and

then Device Mode.

2Select Bridge and

configure a (static) IP

address subnet mask and

gateway IP address for

the ZyWALL’s LAN, WAN,

DMZ and WLAN

interfaces.

3Click Apply. The ZyWALL

restarts.

Skip to Section 5 if you have

servers that you need to be

accesible from the WAN.

ENGLISH

•PPP over Ethernet or PPTP Encapsulation

Select Nailed-Up when you want your connection up all the time (this could be expensive if your ISP bills you

for Internet usage time instead of a flat monthly fee).

To not have the connection up all the time, specify an idle time-out period (in seconds) in Idle Timeout.

•Ethernet Encapsulation

Configure a Roadrunner service in the

NETWORK WAN screens (use the WAN 1 tab).

ENGLISH

5 DMZ

The DeMilitarized Zone (DMZ) allows public servers (web, e-mail, FTP, etc.) to be visible to the outside world

and still have firewall protection from DoS (Denial of Service) attacks.

Unlike the LAN, the ZyWALL does not assign TCP/IP configuration via DHCP to computers connected to the

DMZ ports. Configure the computers with static IP addresses (in the same subnet as the DMZ port's IP

address) and DNS server addresses. Use the ZyWALL's DMZ IP address as the default gateway.

Do the following to configure the DMZ if the ZyWALL is in routing mode.

Note: You do not need to configure DMZ with bridge mode, skip to Section 7.

1Click DMZ in the navigation panel.

ENGLISH

6 NAT

NAT (Network Address Translation - NAT, RFC 1631) means the translation of an IP address in one network

to a different IP address in another. You can use the NAT Address Mapping screens to have the ZyWALL

translate multiple public IP addresses to multiple private IP addresses on your LAN (or DMZ).

The following example allows access from the WAN to an HTTP (web) server on the DMZ. The server has a

private IP address of 10.0.0.20.

2Specify an IP address and subnet mask for the DMZ

interface.

If you use private IP addresses on the DMZ, use NAT to

make the servers publicly accessible (see Section 6).

A public IP address must be on a separate subnet from

the WAN port’s public IP address. If you do not configure

NAT for the public IP addresses on the DMZ, the ZyWALL

routes traffic to the public IP addresses on the DMZ

without performing NAT. This may be useful for hosting

servers for NAT unfriendly applications.

3Click Apply.

ENGLISH

7 Firewall

You can use the ZyWALL without configuring the firewall.

The ZyWALL’s firewall is pre-configured to protect your LAN from attacks from the Internet. By default, no

traffic can enter your LAN unless a request was generated on the LAN first. The ZyWALL allows access to the

DMZ from the WAN or LAN, but blocks traffic from the DMZ to the LAN.

If you are using the ZyWALL in router mode, continue with the next section. For bridge mode, skip to Section

1Click NAT in the navigation panel

and then Port Forwarding.

2Select the Active check box.

3Type a name for the rule.

4Type the port number that the

service uses.

5Type the HTTP server’s IP address.

6Click Apply.

Autres manuels pour ZyWALL 70

Table des matières

Langues :

Autres manuels ZyXEL Communications Porte

ZyXEL Communications

ZyXEL Communications NBG-510S Manuel utilisateur

ZyXEL Communications

ZyXEL Communications P-870HW-I Series Manuel utilisateur

ZyXEL Communications

ZyXEL Communications PRESTIGE 324 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications Internet Security Gateway ZyWALL 100 Manuel

ZyXEL Communications

ZyXEL Communications PRESTIGE 653HX Manuel utilisateur

ZyXEL Communications

ZyXEL Communications P-2602HW-D1A Manuel utilisateur

ZyXEL Communications

ZyXEL Communications p-870hw series Manuel utilisateur

ZyXEL Communications

ZyXEL Communications p-661hw series Manuel utilisateur

ZyXEL Communications

ZyXEL Communications P-660HNU-Tx Manuel utilisateur

ZyXEL Communications

ZyXEL Communications AMG1202-T10B Manuel utilisateur

ZyXEL Communications

ZyXEL Communications AMG1001-T Series Manuel utilisateur

ZyXEL Communications

ZyXEL Communications SBG5500 Series Manuel utilisateur

ZyXEL Communications

ZyXEL Communications DX5510-B0 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications ZyWALL USG 100 Series Manuel utilisateur

ZyXEL Communications

ZyXEL Communications Prestige 653HWI series Manuel utilisateur

ZyXEL Communications

ZyXEL Communications ZyXEL ZyWALL 35 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications P-660HWP-D1 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications ZyAIR G-4100 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications USG310 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications ISG50 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications EX3510-B1 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications USG310 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications P-660HWP-D1 Guide de référence

ZyXEL Communications

ZyXEL Communications ZyWALL USG 100 Series Manuel utilisateur

Manuels Porte populaires d'autres marques

LST

LST M500RFE-AS Manuel utilisateur

Kinnex

Kinnex Media Gateway Manuel utilisateur

2N Telekomunikace

2N Telekomunikace 2N StarGate Manuel utilisateur

Mitsubishi Heavy Industries

Mitsubishi Heavy Industries Superlink SC-WBGW256 Manuel utilisateur

Telsey

Telsey CPVA 500 - SIP Manuel utilisateur

RTA

RTA 460A-NNA4 Fiche technique

Shaw

Shaw Gateway HDPVR Manuel utilisateur

ABB

ABB VSN900 Guide de démarrage rapide

Commander

Commander Pulse Manuel utilisateur

2N Telekomunikace

2N Telekomunikace ATEUS EasyGate 501309E Manuel utilisateur

NETGEAR

NETGEAR C6300BD Manuel utilisateur

Amit

Amit CDW531AM Manuel utilisateur

HMS

HMS Netbiter EasyConnect EC150 Manuel utilisateur

Huawei

Huawei EchoLife HG620 Manuel utilisateur

AT&T

AT&T U-verse 3801 Manuel d'utilisation et d'entretien

Logic IO

Logic IO RTCU MX2 turbo Manuel utilisateur

Suttle

Suttle MediaMAX MXM-521 Manuel utilisateur

RTA

RTA 460MCBC-N2E Fiche technique