ZyXEL Communications ZYWALL 2 WG Manual de usuario

ZyWALL 2WG

Internet Security Appliance

Quick Start Guide

Version 4.02

Edition 1

1/2007

Table of Contents

ENGLISH 1

DEUTSCH 17

ESPAÑOL 33

FRANÇAIS 49

ITALIANO 65

РУССКИЙ 81

SVENSKA 99

简体中文 115

繁體中文 131

ENGLISH

Overview

The ZyWALL 2WG is a firewall with VPN, bandwidth management, content filtering and many other features.

You can use it as a transparent firewall and not reconfigure your network nor configure the ZyWALL’s routing

features. When the ZyWALL is in router mode, you can also insert a 3G wireless card to add a second WAN.

The ZyWALL increases network security by adding the option to change port roles from LAN to DMZ for use

with publicly accessible servers. This guide covers the initial connections and configuration needed to start

using the ZyWALL in your network.

See the User’s Guide for more information on all features.

You may need your Internet access information.

This guide is divided into the following sections.

1 Hardware Connections

You need the following.

1Hardware Connections

2Accessing the Web Configurator

3Bridge Mode

4Internet Access Setup and Product Registration

5DMZ

6NAT

7Firewall

8VPN Rule Setup

9Troubleshooting

ZyWALL Computer Ethernet Cables Power Adaptor

ENGLISH

Do the following to make hardware connections for initial setup.

1Use an Ethernet cable to connect the LAN/DMZ port to a computer. If you configure these ports as DMZ

ports in the LAN or DMZ screen through the web configurator, you can also use Ethernet cables to connect

public servers (web, e-mail, FTP, etc.) to the LAN/DMZ ports.

2Use another Ethernet cable to connect the WAN port to an Ethernet jack with Internet access.

"Use the blue console cable if you want to connect the CONSOLE port to your computer. Use

the black dial backup cable if you want to connect the AUX port to an analog modem.

3Insert a 3G wireless card into the card slot on the side panel to access the Internet wirelessly via a 3G

network. At the time of writing, you can only use the Sierra AC850/860 3G wireless card in the ZyWALL.

4Use the included power adaptor to connect the power socket (on the rear panel) to a power outlet.

5Look at the front panel. The PWR LED turns on. The CARD, LAN/DMZ and WAN LEDs turn on and stay

on if the corresponding connections are properly made.

ENGLISH

VIf none of the LEDs are on, check your connections, and inspect your cables for damage.

Make sure that you have the power adaptor connected to the ZyWALL and plugged in to an

appropriate power source. Make sure the power source is turned on. If the LEDs are still off,

contact your local vendor.

2 Accessing the Web Configurator

Use this section to configure the WAN 1 interface for Internet access.

VIf the login screen does not display, check your browser’s security settings and make sure

your computer’s Ethernet card is installed and functioning properly.

Your computer should be also set to get an IP address automatically from a DHCP server.

See Set Up Your Computer’s IP Address for more information.

1Launch your web browser. Enter 192.168.1.1 (the

ZyWALL’s default IP address) as the address.

2Click Login (the default password 1234 is already

entered).

ENGLISH

VIf you changed the password and have forgotten it, you need to return the ZyWALL to the

defaults (password is 1234, LAN IP address is 192.168.1.1, etc.). Press the RESET button

(on the rear panel) until the PWR LED starts to blink, then release it.

5The HOME screen opens.

The ZyWALL is in router mode by default. Continue to the next step if you want to use routing features

such as NAT, DHCP and VPN.

Go to section 3if you prefer to use the ZyWALL as a transparent firewall.

6Check the network status table. If the WAN 1 status is not Down and there is an IP address, go to section

If the WAN 1 status is Down (or there is not an IP address), click the Wizard icon and use section 4to

configure WAN 1.

3Change the login password by entering a new

password and clicking Apply.

4Click Apply to replace the ZyWALL’s default

digital certificate.

ENGLISH

Use the NETWORK WAN screens if you need to configure WAN 2. You can also configure load balancing

between the WAN connections.

3 Bridge Mode

When you set the ZyWALL to bridge mode, it functions as a transparent firewall. Do the following to set the

ZyWALL to bridge mode.

4 Internet Access Setup and Product Registration

1Click the Wizard icon ( ) in the HOME screen and then the Internet Access Setup link to open the

Internet access wizard.

1Click MAINTENANCE in the navigation

panel and then Device Mode.

2Select Bridge and configure a (static)

IP address subnet mask and gateway

IP address for the ZyWALL’s LAN,

WAN, DMZ and WLAN interfaces.

3Click Apply. The ZyWALL restarts.

Skip to section 5if you have servers that

you need to be accessible from the WAN.

ENGLISH

Enter the Internet access information exactly as given to you.

If you were given an IP address to use, select Static in the IP Address Assignment drop-down list box and

enter the information provided.

"The fields vary depending on what you select in the Encapsulation field. Fill them in with the

information provided by the ISP or network administrator.

Click Apply when you are done.

•PPP over Ethernet or PPTP Encapsulation

Select Nailed-Up when you want your connection up all the time (this could be expensive if your ISP bills you

for Internet usage time instead of a flat monthly fee).

•Ethernet Encapsulation

Configure a Roadrunner service in the

NETWORK WAN screens (use the WAN

tab).

ENGLISH

To not have the connection up all the time, specify an idle time-out period (in seconds) in Idle Timeout.

2Click Next to display the screen where you can

(ZyXEL’s online services center) and activate the

free content filtering trial application. Otherwise,

click Skip and then Close to complete Internet

access setup.

3If you already have an account at

myZyXEL.com, select Existing myZyXEL.com

account and enter account information.

Otherwise, select New myZyXEL.com account

and fill in the fields below to create a new

account and register your ZyWALL. Click Next.

ENGLISH

4Wait for the registration progress to finish.

5The following screen displays if the registration

was not successful. Click Return to go back to

the Device Registration screen and check your

settings.

6Click Close to leave the wizard screen when

the registration and activation are done.

"If you want to activate a standard service with your iCard’s PIN number (license key), use the

REGISTRATION Service screen. See the User’s Guide for details.

VIf you cannot access the Internet via WAN 1, check the ZyWALL’s connection to the Ethernet

jack with Internet access. Make sure the Internet gateway device (such as a DSL modem) is

working properly. Click WAN in the navigation panel to verify your settings.

ENGLISH

5 DMZ

The DeMilitarized Zone (DMZ) allows public servers (web, e-mail, FTP, etc.) to be visible to the outside world

and still have firewall protection from DoS (Denial of Service) attacks.

You can assign TCP/IP configuration via DHCP to computers connected to the DMZ ports. Otherwise,

configure the computers with static IP addresses (in the same subnet as the DMZ port's IP address) and DNS

server addresses. Use the ZyWALL's DMZ IP address as the default gateway.

Do the following to configure the DMZ if the ZyWALL is in routing mode.

Note: You do not need to configure DMZ with bridge mode, skip to section 7.

1Click NETWORK > DMZ in the navigation panel.

2Specify an IP address and subnet mask for the

DMZ interface.

If you use private IP addresses on the DMZ, use

NAT to make the servers publicly accessible (see

section 6).

A public IP address must be on a separate subnet

from the WAN port’s public IP address. If you do

not configure NAT for the public IP addresses on

the DMZ, the ZyWALL routes traffic to the public

IP addresses on the DMZ without performing NAT.

This may be useful for hosting servers for NAT

unfriendly applications.

3Click Apply.

4By default, LAN/DMZ ports 1 to 4 are all LAN

ports. To configure a port as a DMZ port, click the

Port Roles tab, select its radio button next to DMZ

and click Apply.

6 NAT

NAT (Network Address Translation - NAT, RFC 1631) means the translation of an IP address in one network

to a different IP address in another. You can use the NAT Address Mapping screens to have the ZyWALL

translate multiple public IP addresses to multiple private IP addresses on your LAN (or DMZ).

The following example allows access from the WAN1 to an HTTP (web) server on the DMZ. The server has a

private IP address of 10.0.0.20.

Otros manuales para ZYWALL 2 WG

Tabla de contenidos

Idiomas:

Otros manuales de Enrutador de red de ZyXEL Communications

ZyXEL Communications

ZyXEL Communications VES-1616F-44 Manual de usuario

ZyXEL Communications

ZyXEL Communications Prestige 128IMH Manual de usuario

ZyXEL Communications

ZyXEL Communications PRESTIGE 335 Manual de usuario

ZyXEL Communications

ZyXEL Communications NBG6616 Manual de usuario

ZyXEL Communications

ZyXEL Communications VES-1012 - Manual de usuario

ZyXEL Communications

ZyXEL Communications AMG1202-T10A Manual de usuario

ZyXEL Communications

ZyXEL Communications P-336M Manual de usuario

ZyXEL Communications

ZyXEL Communications IES-1000 - ANNEXE 7 Manual

ZyXEL Communications

ZyXEL Communications ES-1016B Guía de referencia

ZyXEL Communications

ZyXEL Communications Prestige 650 Manual de usuario

ZyXEL Communications

ZyXEL Communications LTE3316 Series Manual de usuario

ZyXEL Communications

ZyXEL Communications Dimension GS-3012 Manual

ZyXEL Communications

ZyXEL Communications VMG8623 Manual de usuario

ZyXEL Communications

ZyXEL Communications ZyXEL ZyWALL P1 Manual de usuario

ZyXEL Communications

ZyXEL Communications VMG Series Manual de usuario

ZyXEL Communications

ZyXEL Communications Prestige P660RU-T1 Manual de usuario

ZyXEL Communications

ZyXEL Communications LTE3301-PLUS Manual de usuario

ZyXEL Communications

ZyXEL Communications FR1000Z Manual de usuario

ZyXEL Communications

ZyXEL Communications PRESTIGE 650H-13 Manual de usuario

ZyXEL Communications

ZyXEL Communications Dimension ES-4024 Manual de usuario

ZyXEL Communications

ZyXEL Communications o2 HomeBox 6641 Manual de usuario

ZyXEL Communications

ZyXEL Communications PRESTIGE 1400 - Manual de usuario

ZyXEL Communications

ZyXEL Communications P-2602R-D1A Manual

ZyXEL Communications

ZyXEL Communications Prestige 202H Series Manual de usuario

Manuales populares de Enrutador de red de otras marcas

Allnet

Allnet ALL0333AU Manual de usuario

HomeSeer

HomeSeer HT-SEL Manual de usuario

Sercomm

Sercomm Genesis OC3505D Manual de usuario

Billion

Billion BIPAC 5102 Series Manual de usuario

TP-Link

TP-Link TD-8817 Manual de usuario

Motorola

Motorola MR1900 Manual de usuario

Digi

Digi IX14 Manual de usuario

Cisco

Cisco NCS 540 Manual

XAVi

XAVi X8821e Manual de usuario

BEC

BEC 6200WZL Manual de usuario

MikroTik

MikroTik hAP ac3 Series Manual de usuario

Korenix

Korenix JetNet 5428G Series Manual de usuario

NETGEAR

NETGEAR FS526T - Switch Manual de usuario

Korenix

Korenix JetNet 5710G Series Manual de usuario

Automated Logic

Automated Logic ZN551 Manual del propietario

Cisco

Cisco ASR 1000 Series Manual del operador

EnGenius

EnGenius ESR-9710 Manual de usuario

Cisco

Cisco 805 Series Instrucciones de funcionamiento y seguridad