ZyXEL Communications Network Router USG 2000 Manual de usuario descargar pdf (Pagina 51)

ZyWALL USG 2000 User’s Guide

CHAPTER 3

Web Configurator

The ZyWALL Web Configurator allows easy ZyWALL setup and management using

an Internet browser.

3.1 Web Configurator Requirements

In order to use the Web Configurator, you must

• Use Internet Explorer 7 or later, or Firefox 1.5 or later

• Allow pop-up windows (blocked by default in Windows XP Service Pack 2)

• Enable JavaScript (enabled by default)

• Enable Java permissions (enabled by default)

• Enable cookies

The recommended screen resolution is 1024 x 768 pixels.

3.2 Web Configurator Access

1 Make sure your ZyWALL hardware is properly connected. See the Quick Start

Guide.

1 2 ... 46 47 48 49 50 51 52 53 54 55 56 ... 107 108

ZyWALL USG 2000 1
About This User's Guide 3
Documentation Feedback 4
Need More Help? 4
Customer Support 4
Disclaimer 5
Document Conventions 6
Icons Used in Figures 7
Safety Warnings 8
Contents Overview 9
Table of Contents 11
Chapter 7 13
Chapter 14 17
Chapter 15 17
Chapter 34 22
Chapter 35 22
Chapter 51 27
Table of Contents 29
User’s Guide 31
CHAPTER 1 33
1.3 Front Panel 35
1.3.1.1 1000Base-T Ports 36
1.3.1.2 Mini-GBIC Slots 36
1.3.2 Maximizing Throughput 39
1.3.3 Front Panel LEDs 39
1.4 Management Overview 40
Web Configurator 41
Command-Line Interface (CLI) 41
Console Port 41
CHAPTER 2 43
Firewall 44
Bandwidth Management 44
Content Filter 44
2.2 Applications 45
2.2.1 VPN Connectivity 46
2.2.2.2 Full Tunnel Mode 47
2.2.5 Device HA 49
CHAPTER 3 51
Figure 19 Login Screen 52
Figure 21 Dashboard 53
3.3.1 Title Bar 54
3.3.2 Navigation Panel 54
3.3.2.1 Dashboard 55
3.3.2.2 Monitor Menu 55
3.3.2.3 Configuration Menu 56
Chapter 3 Web Configurator 57
FOLDER OR 57
TAB FUNCTION 57
Chapter 3 Web Configurator 58
3.3.3 Main Window 60
3.3.3.1 Warning Messages 61
3.3.3.2 Site Map 61
3.3.3.3 Object Reference 61
Figure 26 Object Reference 62
Table 8 Object References 62
3.3.4 Tables and Lists 63
3.3.4.3 Working with Lists 66
CHAPTER 4 67
4.1.3 Internet Access: PPPoE 70
4.1.4 Internet Access: PPTP 71
4.1.5 ISP Parameters 71
4.1.5.1 PPTP Configuration 72
4.2 Device Registration 74
CHAPTER 5 77
5.2.2 Select WAN Type 78
5.2.3 Configure WAN Settings 79
Chapter 5 Quick Setup 81
5.3 VPN Quick Setup 83
Chapter 5 Quick Setup 88
CHAPTER 6 95
6.2.1 Interface Types 97
6.4 Packet Flow 100
6.5.1 Feature 104
6.5.2 Licensing Registration 104
6.5.3 Licensing Update 104
6.5.4 Interface 105
6.5.5 Trunks 105
6.5.6 Policy Routes 105
6.5.7 Static Routes 107
6.5.8 Zones 107
6.5.9 DDNS 107
6.5.10 NAT 107
6.5.11 HTTP Redirect 108
6.5.12 ALG 109
6.5.13 Auth. Policy 109
6.5.14 Firewall 109
6.5.15 IPSec VPN 110
6.5.16 SSL VPN 110
6.5.17 L2TP VPN 111
6.5.18 Application Patrol 111
6.5.19 Anti-Virus 112
6.5.20 IDP 112
6.5.21 ADP 112
6.5.22 Content Filter 112
6.5.23 Anti-Spam 113
6.5.24 Device HA 113
6.6 Objects 114
6.7 System 115
6.7.2 Logs and Reports 116
6.7.3 File Manager 116
6.7.4 Diagnostics 116
6.7.5 Shutdown 116
MENU ITEM(S) 117
CHAPTER 7 119
7.1.2 Configure Zones 120
Figure 74 Status 124
Figure 75 Trunk Example 124
ge2: 1 Mbps 124
ge3: 512 Kbps 124
7.4.1 Set Up the VPN Gateway 128
Headquarters (ZyWALL USG): 131
Branch Office B (ZyWALL USG): 132
7.6.1 Set Up User Accounts 134
7.6.2 Set Up User Groups 134
Authentication Policy) 137
Chapter 7 Tutorials 138
Chapter 7 Tutorials 139
7.6.5 Set Up MSN Policies 140
7.6.6 Set Up Firewall Rules 141
User Accounts based on Groups 142
Authentication Policies 144
Configured) 149
7.10.1 Turn On the ALG 151
7.11.2 Configure NAT 155
7.12.1 Turn On the ALG 159
7.14.1 Before You Start 165
ZyWALL Example 166
Example 167
CHAPTER 8 171
Connection Example 173
Chapter 8 L2TP VPN Example 176
6 Click Close 178
Chapter 8 L2TP VPN Example 181
172.16.1.2 187
Figure 175 Registry Key 192
Figure 176 New DWORD Value 192
Figure 178 Run mmc 193
12 Click Add 198
6 Click Properties 203
Technical Reference 207
CHAPTER 9 209
Table 21 Dashboard 210
Chapter 9 Dashboard 211
LABEL DESCRIPTION 211
Chapter 9 Dashboard 212
9.2.1 The CPU Usage Screen 216
9.2.4 The VPN Status Screen 219
9.2.5 The DHCP Table Screen 219
CHAPTER 10 223
Chapter 10 Monitor 225
10.3 Interface Status Screen 227
Chapter 10 Monitor 228
10.6 The DDNS Status Screen 236
10.7 IP/MAC Binding Monitor 236
10.8 The Login Users Screen 238
10.9 Cellular Status Screen 239
Statistics by Rule 244
10.20 Log Screen 261
Table 50 Monitor > Log 262
CHAPTER 11 265
Anti-Virus Engines 266
11.2 The Registration Screen 267
Chapter 11 Registration 268
11.3 The Service Screen 269
CHAPTER 12 271
Chapter 12 Signature Update 276
CHAPTER 13 277
Interface Characteristics 278
Types of Interfaces 278
Characteristics 279
13.2 Port Grouping 280
13.2.2 Port Grouping Screen 281
13.3 Ethernet Summary Screen 282
Chapter 13 Interfaces 283
LABEL DESCRIPTION 283
13.3.1 Ethernet Edit 284
Chapter 13 Interfaces 286
13.3.2 Object References 291
13.4 PPP Interfaces 292
13.4.1 PPP Interface Summary 293
13.6 VLAN Interfaces 308
VLAN Interfaces Overview 309
13.6.1 VLAN Summary Screen 310
13.6.2 VLAN Add/Edit 311
13.7 Bridge Interfaces 318
Bridge Interface Overview 319
13.7.1 Bridge Summary 320
13.7.2 Bridge Add/Edit 321
13.8 Auxiliary Interface 327
13.9 Virtual Interfaces 329
IP Address Assignment 331
Interface Parameters 332
DHCP Settings 333
PPPoE/PPTP Overview 335
CHAPTER 14 337
14.1.2 What You Need to Know 338
Load Balancing Algorithms 339
Least Load First 339
Weighted Round Robin 340
Spillover 340
Finding Out More 341
14.3 Configuring a Trunk 343
Chapter 14 Trunks 344
CHAPTER 15 347
Policy Routing 348
Static Routes 348
DiffServ 349
15.2 Policy Route Screen 350
15.3 IP Static Route Screen 357
NAT and SNAT 359
Port Triggering 360
Maximize Bandwidth Usage 361
CHAPTER 16 363
16.2 The RIP Screen 364
16.3 The OSPF Screen 365
OSPF Areas 366
OSPF Routers 367
Virtual Links 368
OSPF Configuration 369
Chapter 16 Routing Protocols 371
Authentication Types 375
Chapter 16 Routing Protocols 376
CHAPTER 17 377
17.1.2 What You Need to Know 378
17.2 The Zone Screen 379
17.3 Zone Edit 380
CHAPTER 18 381
18.2 The DDNS Screen 382
Chapter 18 DDNS 383
DDNS server 385
CHAPTER 19 387
19.2 The NAT Screen 388
Chapter 19 NAT 389
Chapter 19 NAT 392
19.3 NAT Technical Reference 393
CHAPTER 20 397
20.1.2 What You Need to Know 398
CHAPTER 21 401
21.1.2 What You Need to Know 402
21.2 The ALG Screen 405
Chapter 21 ALG 406
21.3 ALG Technical Reference 407
CHAPTER 22 409
22.2 IP/MAC Binding Summary 410
22.2.1 IP/MAC Binding Edit 411
22.2.2 Static DHCP Edit 412
Chapter 22 IP/MAC Binding 414
CHAPTER 23 415
23.1.2 What You Need to Know 416
CHAPTER 24 423
24.1.2 What You Need to Know 424
Global Firewall Rules 425
Firewall Rule Criteria 425
User Specific Firewall Rules 425
Firewall and VPN Traffic 425
Session Limits 426
1 Any Any Any Any IRC Deny 427
2 Any Any Any Any Any Allow 427
24.2 The Firewall Screen 431
Chapter 24 Firewall 433
Chapter 24 Firewall 434
CHAPTER 25 441
25.1.2 What You Need to Know 442
Application Scenarios 443
25.1.3 Before You Begin 444
Chapter 25 IPSec VPN 447
Chapter 25 IPSec VPN 448
Manual Key 453
Key (continued) 454
25.3 The VPN Gateway Screen 456
25.4 VPN Concentrator 465
Section 25.2.1 on page 446 469
IKE SA Overview 470
Diffie-Hellman key exchange 471
Authentication 472
Additional Topics for IKE SA 473
Negotiation Mode 474
VPN, NAT, and NAT Traversal 474
Extended Authentication 475
Certificates 475
IPSec SA Overview 476
IPSec SA using Manual Keys 478
CHAPTER 26 481
Full Tunnel Mode 482
SSL Access Policy 482
SSL Access Policy Objects 482
Chapter 26 SSL VPN 485
Chapter 26 SSL VPN 486
Figure 349 Login Screen 491
CHAPTER 27 493
27.2 Remote User Login 494
Figure 354 Login Screen 495
Chapter 27 SSL User Screens 499
# DESCRIPTION 499
27.4 Bookmarking the ZyWALL 500
Chapter 27 SSL User Screens 502
CHAPTER 28 503
CHAPTER 29 505
Figure 366 File Sharing 506
29.3.1 Downloading a File 508
29.4 Creating a New Folder 509
29.7 Uploading a File 511
CHAPTER 30 513
30.2 Statistics 514
30.3 View Log 515
30.5 Stop the Connection 516
CHAPTER 31 517
Policy Route 518
31.2 L2TP VPN Screen 519
Chapter 31 L2TP VPN 520
CHAPTER 32 521
DiffServ and DSCP Marking 523
Bandwidth Management Priority 525
Configured Rate Effect 526
Priority Effect 526
Figure 392 Application Edit 534
Table 139 Application Edit 534
Chapter 32 Application Patrol 536
CHAPTER 33 547
Virus and Worm 548
ZyWALL Anti-Virus Scanner 548
33.1.3 Before You Begin 550
Chapter 33 Anti-Virus 551
Chapter 33 Anti-Virus 552
33.3 Anti-Virus Black List 555
White List) > Add 556
33.5 Anti-Virus White List 557
33.6 Signature Searching 558
Types of Computer Viruses 561
Types of Anti-Virus Scanner 561
CHAPTER 34 563
34.1.3 Before You Begin 564
34.2 The IDP General Screen 565
Chapter 34 IDP 566
34.3.1 Base Profiles 568
34.5 Creating New Profiles 570
Chapter 34 IDP 571
34.6.2 Policy Types 574
34.6.3 IDP Service Groups 575
34.6.5 Query Example 579
•Actions: Any 580
34.7.1 IP Packet Header 581
34.8.2.2 Analyze Packets 591
34.9 IDP Technical Reference 594
Network Intrusions 595
Snort Signatures 595
CHAPTER 35 597
35.1.4 Before You Begin 598
35.2 The ADP General Screen 599
35.3.1 Base Profiles 601
Chapter 35 ADP 603
Chapter 35 ADP 604
35.4 ADP Technical Reference 609
Decoy Port Scans 610
Distributed Port Scans 610
Port Sweeps 610
Filtered Port Scans 610
Flood Detection 611
ICMP Flood Attack 611
TCP SYN Flood Attack 611
LAND Attack 612
UDP Flood Attack 613
CHAPTER 36 617
Content Filtering Profiles 618
Keyword Blocking URL Checking 618
36.1.3 Before You Begin 619
Chapter 36 Content Filtering 621
Chapter 36 Content Filtering 622
CHAPTER 37 641
CHAPTER 38 649
Black List 650
SMTP and POP3 650
E-mail Headers 650
38.2 Before You Begin 651
38.6 The DNSBL Screen 660
Chapter 38 Anti-Spam 661
Chapter 38 Anti-Spam 666
CHAPTER 39 667
39.1.3 Before You Begin 668
39.2 Device HA General 669
Virtual Router 670
Cluster ID 670
Chapter 39 Device HA 673
Chapter 39 Device HA 674
Monitored Interface 675
39.5 The Legacy Mode Screen 677
192.168.10.112 686
Synchronization 687
CHAPTER 40 689
Ext-User Accounts 690
Ext-Group-User Accounts 691
User Groups 691
User Awareness 691
40.2 User Summary Screen 692
•adm •admin •any •bin •daemon 693
• sync • uucp • zyxel 693
Chapter 40 User/Group 694
40.3.1 Group Add/Edit Screen 696
40.4 Setting Screen 697
Chapter 40 User/Group 699
CHAPTER 41 705
Chapter 41 Addresses 710
CHAPTER 42 711
CHAPTER 43 717
Chapter 43 Schedules 720
CHAPTER 44 723
44.1.2 RADIUS Server 724
44.1.3 ASAS 724
44.1.5 What You Need To Know 725
Distinguished Name (DN) 726
Base DN 726
Bind DN 726
44.3 RADIUS Server Summary 729
Chapter 44 AAA Server 732
CHAPTER 45 733
CHAPTER 46 739
Advantages of Certificates 740
Self-signed Certificates 740
Factory Default Certificate 741
Certificate File Formats 741
Chapter 46 Certificates 744
Chapter 46 Certificates 745
characters 746
CHAPTER 47 761
47.2.1 ISP Account Edit 762
Chapter 47 ISP Accounts 763
Chapter 47 ISP Accounts 764
CHAPTER 48 765
Remote Desktop Connections 766
Weblinks 766
Chapter 48 SSL Application 769
Chapter 48 SSL Application 772
CHAPTER 49 773
Requirements 774
Chapter 49 Endpoint Security 776
Chapter 49 Endpoint Security 777
CHAPTER 50 783
50.2 Host Name 784
50.3 Date and Time 785
Chapter 50 System 786
50.4 Console Port Speed 789
50.5 DNS Overview 789
Chapter 50 System 791
50.5.3 Address Record 793
50.5.4 PTR Record 793
50.5.8 MX Record 795
50.5.9 Adding a MX Record 796
50.6 WWW Overview 797
50.6.2 System Timeout 798
50.6.3 HTTPS 798
50.6.5 Service Control Rules 803
50.6.7 HTTPS Example 807
50.6.7.4 Login Screen 809
50.7 SSH 814
50.7.1 How SSH Works 815
50.7.4 Configuring SSH 816
50.8 Telnet 819
50.8.1 Configuring Telnet 820
50.9 FTP 821
50.10 SNMP 823
50.10.1 Supported MIBs 825
50.10.2 SNMP Traps 825
50.10.3 Configuring SNMP 825
50.11 Dial-in Management 827
Response Strings 828
50.12 Vantage CNM 829
Note: HTTPS is recommended 831
50.13 Language Screen 832
CHAPTER 51 833
Chapter 51 Log and Report 834
51.3 Log Setting Screens 835
51.3.1 Log Setting Summary 836
Chapter 51 Log and Report 839
CHAPTER 52 847
Chapter 52 File Manager 851
Chapter 52 File Manager 852
CHAPTER 53 859
Chapter 53 Diagnostics 861
Chapter 53 Diagnostics 864
CHAPTER 54 865
Chapter 54 Reboot 866
CHAPTER 55 867
Chapter 55 Shutdown 868
CHAPTER 56 869
I cannot access the Internet 870
56.1 Resetting the ZyWALL 886
56.2 Changing a Power Module 887
Chapter 56 Troubleshooting 888
CHAPTER 57 891
FEATURE STANDARDS REFERENCED 897
APPENDIX A 899
Appendix A Log Descriptions 900
LOG MESSAGE DESCRIPTION 900
Table 262 Anti-Spam Logs 901
Table 263 SSL VPN Logs 903
Appendix A Log Descriptions 905
Table 265 ZySH Logs 907
Table 266 ADP Logs 909
Table 267 Anti-Virus Logs 910
Table 268 User Logs 913
Table 269 myZyXEL.com Logs 914
Table 270 IDP Logs 919
MESSAGE EXPLANATION 923
Table 272 IKE Logs 925
Table 273 IPSec Logs 928
Table 274 Firewall Logs 929
Table 276 Policy Route Logs 930
Table 278 System Logs 935
Table 280 Device HA Logs 941
Table 282 NAT Logs 946
Table 283 PKI Logs 947
CODE DESCRIPTION 949
Table 284 Interface Logs 950
Table 285 Account Logs 954
Table 288 File Manager Logs 955
Table 289 DHCP Logs 956
APPENDIX B 959
Appendix B Common Services 960
Appendix B Common Services 961
APPENDIX C 963
Windows 2000 964
Windows 98 SE/Me 965
APPENDIX D 969
Konqueror 990
APPENDIX E 995
APPENDIX F 1051
ZyXEL Limited Warranty 1053
Registration 1054
Numerics 1055
ZyWALL USG 2000 User’s Guide 1056

Comentarios a estos manuales

Sin comentarios

ZyXEL Communications Network Router USG 2000 Manual de usuario Pagina 51

Comentarios a estos manuales

Relacionado con productos y manuales para Routers ZyXEL Communications Network Router USG 2000