ZyXEL Communications ZyWall 35 Support Notes page 16

ZyWALL 35 Support Notes
Step3. After rebooting, login ZyWALL's GUI by accessing ZyWALL's management IP address.
(Accessing ZyWALL by the PC with a static IP address configured in the same subnet or with an IP from
DHCP server (refer to step1 for the pre-configured firewall rule).
Step4. In this example, since we want to apply a DMZ zone for servers. So for ZyWALL5/35 which the
ports of LAN & DMZ can be configured, user can decide the roles of each port.
Go to Network >> Bridge >> Port Roles. By default, 4 ports are assigned to LAN. In this example, we
use port 1 & 2 assigned to LAN and Port 3 & 4 assigned to DMZ as following picture.
Step5. Furthermore, to configure firewall rule to control the access of your network, go to SECURITY
>> FIREWALL as you do in router mode firewall. For example, user wants to block the access from a
FTP server (210.242.82.2) in DMZ zone to LAN hosts (210.242.82.31~34) (Note that they all sits in the
same IP segment 210.242.82.0/24). Edit the firewall rule via Firewall >> Rule Summary and with
packet direction: DMZ to LAN.
And enter 210.242.82.2 as the source address and 210.242.82.31~34 as destination address. And then
select the service and set the action for 'Matched Packet' to 'BLOCK'.
16
All contents copyright (c) 2006 ZyXEL Communications Corporation.