Zones, Interfaces, And Physical Ports; Interface Types - ZyXEL Communications ZyWall USG 50-H Series User Manual

Chapter 5 Configuration Basics

5.2 Zones, Interfaces, and Physical Ports

Zones (groups of interfaces and VPN tunnels) simplify security settings. Here is an overview
of zones, interfaces, and physical ports in the ZyWALL.
Figure 42 Zones, Interfaces, and Physical Ethernet Ports
Zones
Interfaces
Physical Ports
Table 21
Zones
(WAN, LAN1, LAN2,
WLAN, DMZ)
Interfaces
(Ethernet, VLAN,...)
Physical Ports
(Labeled WAN 1,2
and LAN/DMZ 1~4 on
the physical hardware
and P1~P6 in the
configuration)

5.2.1 Interface Types

There are many types of interfaces in the ZyWALL. In addition to being used in various
features, interfaces also describe the network that is directly connected to the ZyWALL.
• Ethernet interfaces are the foundation for defining other interfaces and network policies.
You also configure RIP and OSPF in these interfaces.
• Port groups are created when you use the Interface > Port Roles screen to set multiple
physical ports to be part of the same (lan1, lan2, or dmz) interface. This creates a hardware
connection between the physical ports at the layer-2 (data link, MAC address) level.
• PPP interfaces support Point-to-Point Protocols (PPPoE or PPTP). ISP account settings
are included.
• Cellular interfaces are for 3G WAN connections via a connected 3G device.
• WLAN interfaces are for wireless LAN (IEEE 802.11b/g/n) connections.
• VLAN interfaces recognize tagged frames. The ZyWALL automatically adds or removes
the tags as needed. Each VLAN can only be associated with one Ethernet interface.
80
WAN
wan1 wan2
Zones, Interfaces, and Physical Ethernet Ports
A zone is a group of interfaces and VPN tunnels. Use zones to apply security
settings such as firewall, remote management, and application patrol.
Interfaces are logical entities that (layer-3) packets pass through. Use
interfaces in configuring VPN, zones, trunks, DDNS, policy routes, static
routes, HTTP redirect, and virtual server.
Port roles combine physical ports into interfaces called port groups.
The wlan1-1 interface uses the ZyWALL's built-in wireless LAN. The other
interfaces are built on the physical Ethernet ports (where you connect an
Ethernet cable). In configuration, you use physical ports when configuring port
roles. You use interfaces and zones in configuring other features.
LAN1
LAN2
lan1
lan2
ZyWALL USG 50-H User's Guide
WLAN
DMZ
dmz
wlan1-1