ZyXEL Communications ZyWALL 70 Manual de usuario

ZyWALL 70

Internet Security Gateway

Quick Start Guide

Version 3.64

3/2005

Table of Contents

ENGLISH 1

DEUTSCH 23

ESPAÑOL 47

FRANÇAIS 71

ITALIANO 95

中文 119

ENGLISH

Overview

The ZyWALL 70 is a load-balancing, dual WAN firewall with VPN, bandwidth management, content filtering

and many other features. You can use it as a transparent firewall and not reconfigure your network nor

configure the ZyWALL’s routing features. The ZyWALL increases network security by providing DMZ ports for

use with publicly accessible servers. This guide covers the initial connections and configuration needed to

start using the ZyWALL in your network.

See the User’s Guide for more information on all features.

You may need your Internet access information.

This guide is divided into the following sections.

1 Hardware Connections

You need the following.

1Hardware Connections

2Accessing the Web Configurator

3Bridge Mode

4Internet Access Setup

5DNS

6NAT

7Firewall

8VPN Rule Setup

9myZyXEL.com Product Registration

10External Database Content Filtering

11Troubleshooting

ZyWALL Computer Ethernet Cables Power Cord

ENGLISH

Do the following to make hardware connections for initial setup.

1Use an Ethernet cable to connect the LAN port to a computer. You can also use Ethernet cables to

connect public servers (web, e-mail, FTP, etc.) to the DMZ ports.

2Use another Ethernet cable(s) to connect the WAN 1 and/or WAN 2 port to an Ethernet jack with Internet

access.

3Use the included power cord to connect the power socket (on the rear panel) to a power outlet

4Push the power switch to the on position and look at the front panel. The PWR LED turns on. The SYS

LED blinks while performing system testing and then stays on if the testing is successful. The ACT, CARD,

LAN, DMZ, and WAN LEDs turn on and stay on if the corresponding connections are properly made.

ENGLISH

2 Accessing the Web Configurator

Use this section to configure the WAN 1 interface for Internet access.

5The HOME screen opens.

The ZyWALL is in router mode by default. Continue to the next step if you want to use routing features

such as NAT, DHCP and VPN.

Go to Section 3 if you prefer to use the ZyWALL as a transparent firewall.

1Launch your web browser. Enter 192.168.1.1 (the

ZyWALL’s default IP address) as the address.

If the login screen does not display, see Section

11.1 to set your computer’s IP address.

2Click Login (the default password 1234 is already

entered).

3Change the login password by entering a new

password and clicking Apply.

4Click Apply to replace the ZyWALL’s default

digital certificate.

ENGLISH

3 Bridge Mode

When you set the ZyWALL to bridge mode, it functions as a transparent firewall. Do the following to set the

ZyWALL to bridge mode.

6Check the Network

Status table. If the

WAN 1 status is not

Down and there is an

IP address, go to

Section 5.

If the WAN 1 status is

Down (or there is not

an IP address), click

Internet Access and

use Section 4 to

configure WAN 1.

Use the NETWORK

WAN screens if you

need to configure

WAN 2. You can also

configure load

balancing between the

WAN ports.

ENGLISH

4 Internet Access Setup

Enter the Internet access information exactly as given to you.

If you were given an IP address to use, select Static in the IP Address Assignment drop-down list box and

enter the information provided.

Note: The fields vary depending on what you select in the Encapsulation field. Fill them in with the

information provided by the ISP or network administrator.

Click Finish when you are done.

1Click MAINTENANCE in

the navigation panel and

then Device Mode.

2Select Bridge and

configure a (static) IP

address subnet mask and

gateway IP address for

the ZyWALL’s LAN, WAN,

DMZ and WLAN

interfaces.

3Click Apply. The ZyWALL

restarts.

Skip to Section 5 if you have

servers that you need to be

accesible from the WAN.

ENGLISH

•PPP over Ethernet or PPTP Encapsulation

Select Nailed-Up when you want your connection up all the time (this could be expensive if your ISP bills you

for Internet usage time instead of a flat monthly fee).

To not have the connection up all the time, specify an idle time-out period (in seconds) in Idle Timeout.

•Ethernet Encapsulation

Configure a Roadrunner service in the

NETWORK WAN screens (use the WAN 1 tab).

ENGLISH

5 DMZ

The DeMilitarized Zone (DMZ) allows public servers (web, e-mail, FTP, etc.) to be visible to the outside world

and still have firewall protection from DoS (Denial of Service) attacks.

Unlike the LAN, the ZyWALL does not assign TCP/IP configuration via DHCP to computers connected to the

DMZ ports. Configure the computers with static IP addresses (in the same subnet as the DMZ port's IP

address) and DNS server addresses. Use the ZyWALL's DMZ IP address as the default gateway.

Do the following to configure the DMZ if the ZyWALL is in routing mode.

Note: You do not need to configure DMZ with bridge mode, skip to Section 7.

1Click DMZ in the navigation panel.

ENGLISH

6 NAT

NAT (Network Address Translation - NAT, RFC 1631) means the translation of an IP address in one network

to a different IP address in another. You can use the NAT Address Mapping screens to have the ZyWALL

translate multiple public IP addresses to multiple private IP addresses on your LAN (or DMZ).

The following example allows access from the WAN to an HTTP (web) server on the DMZ. The server has a

private IP address of 10.0.0.20.

2Specify an IP address and subnet mask for the DMZ

interface.

If you use private IP addresses on the DMZ, use NAT to

make the servers publicly accessible (see Section 6).

A public IP address must be on a separate subnet from

the WAN port’s public IP address. If you do not configure

NAT for the public IP addresses on the DMZ, the ZyWALL

routes traffic to the public IP addresses on the DMZ

without performing NAT. This may be useful for hosting

servers for NAT unfriendly applications.

3Click Apply.

ENGLISH

7 Firewall

You can use the ZyWALL without configuring the firewall.

The ZyWALL’s firewall is pre-configured to protect your LAN from attacks from the Internet. By default, no

traffic can enter your LAN unless a request was generated on the LAN first. The ZyWALL allows access to the

DMZ from the WAN or LAN, but blocks traffic from the DMZ to the LAN.

If you are using the ZyWALL in router mode, continue with the next section. For bridge mode, skip to Section

1Click NAT in the navigation panel

and then Port Forwarding.

2Select the Active check box.

3Type a name for the rule.

4Type the port number that the

service uses.

5Type the HTTP server’s IP address.

6Click Apply.

Otros manuales para ZyWALL 70

Tabla de contenidos

Idiomas:

Otros manuales de Puerta de ZyXEL Communications

ZyXEL Communications

ZyXEL Communications ZYWALL P1 - V3.64 Manual de usuario

ZyXEL Communications

ZyXEL Communications ISG50 Instrucciones de instalación y funcionamiento

ZyXEL Communications

ZyXEL Communications P-873HNUP-51B Manual

ZyXEL Communications

ZyXEL Communications ZYWALL 20W - Manual de usuario

ZyXEL Communications

ZyXEL Communications ZyWALL 70 Manual de usuario

ZyXEL Communications

ZyXEL Communications P-660HNT1 Manual de usuario

ZyXEL Communications

ZyXEL Communications ADSL2+ 4-port Gateway P-660H-D Series Manual de usuario

ZyXEL Communications

ZyXEL Communications VSG-1200 Manual de usuario

ZyXEL Communications

ZyXEL Communications P-2304R-P1 Series Manual de usuario

ZyXEL Communications

ZyXEL Communications P-2302HW-P1 Series Manual de usuario

ZyXEL Communications

ZyXEL Communications 3415 Manual de usuario

ZyXEL Communications

ZyXEL Communications SBG5500-A Manual de usuario

ZyXEL Communications

ZyXEL Communications VSG1435-B101 - V1.10 Manual de usuario

ZyXEL Communications

ZyXEL Communications P660HW-T1V3 Manual de usuario

ZyXEL Communications

ZyXEL Communications ADSL 2+ Security Gateway Manual de usuario

ZyXEL Communications

ZyXEL Communications P-793H 601156 Manual de usuario

ZyXEL Communications

ZyXEL Communications XMG3512-B10A Manual de usuario

ZyXEL Communications

ZyXEL Communications Prestige 653HWI series Manual de usuario

ZyXEL Communications

ZyXEL Communications LTE3301 Series Manual de usuario

ZyXEL Communications

ZyXEL Communications VMG1312-BX0D Manual de usuario

ZyXEL Communications

ZyXEL Communications VMG1312-T20A Manual de usuario

ZyXEL Communications

ZyXEL Communications UAG5100 Manual de usuario

ZyXEL Communications

ZyXEL Communications P-870HN-51B Manual de usuario

ZyXEL Communications

ZyXEL Communications P-870HW-51A V2 Manual de usuario

Manuales populares de Puerta de otras marcas

LST

LST M500RFE-AS Manual de usuario

Kinnex

Kinnex Media Gateway Manual de usuario

2N Telekomunikace

2N Telekomunikace 2N StarGate Manual de usuario

Mitsubishi Heavy Industries

Mitsubishi Heavy Industries Superlink SC-WBGW256 Manual de usuario

Telsey

Telsey CPVA 500 - SIP Manual de usuario

RTA

RTA 460A-NNA4 Hoja de especificaciones

Shaw

Shaw Gateway HDPVR Manual de usuario

ABB

ABB VSN900 Guía de inicio rápido

Commander

Commander Pulse Manual de usuario

2N Telekomunikace

2N Telekomunikace ATEUS EasyGate 501309E Manual de usuario

NETGEAR

NETGEAR C6300BD Manual de usuario

Amit

Amit CDW531AM Manual de usuario

HMS

HMS Netbiter EasyConnect EC150 Manual de usuario

Huawei

Huawei EchoLife HG620 Manual de usuario

AT&T

AT&T U-verse 3801 Manual de uso y cuidado

Logic IO

Logic IO RTCU MX2 turbo Manual de usuario

Suttle

Suttle MediaMAX MXM-521 Manual de usuario

RTA

RTA 460MCBC-N2E Hoja de especificaciones