Table 37-1 Menu 24.11 - Remote Management Control - ZyXEL Communications ZyWALL 5 User Manual

ZyWALL 5 Internet Security Appliance
FIELD
Telnet Server Each of these read-only labels denotes a service that you may use to
FTP Server SSH remotely manage the ZyWALL.
Server
HTTPS Server
HTTP Server
SNMP Service
DNS Service
Port This field shows the port number for the service or protocol. You may
change the port number if needed, but you must use the same port
number to access the ZyWALL.
Access Select the access interface (if any) by pressing [SPACE BAR], then
[ENTER] to choose from: LAN only, WAN only, DMZ only, ALL or
Disable.
Secure Client IP The default 0.0.0.0 allows any client to use this service to remotely
manage the ZyWALL. Enter an IP address to restrict access to a client
with a matching IP address.
Certificate Press [SPACE BAR] and then [ENTER] to select the certificate that the
ZyWALL will use to identify itself. The ZyWALL is the SSL server and must
always authenticate itself to the SSL client (the computer which requests
the HTTPS connection with the ZyWALL).
Authenticate Select Yes by pressing [SPACE BAR], then [ENTER] to require the SSL
Client client to authenticate itself to the ZyWALL by sending the ZyWALL a
Certificates certificate. To do that the SSL client must have a CA-signed certificate
from a CA that has been imported as a trusted CA on the ZyWALL (see
the appendix on importing certificates for details).
Once you have filled in this menu, press [ENTER] at the message "Press ENTER to Confirm or ESC to Cancel"
to save your configuration, or press [ESC] to cancel.
37.1.1 Remote Management Limitations
Remote management over LAN or WAN will not work when:
1. A filter in menu 3.1 (LAN) or in menu 11.5 (WAN) is applied to block a Telnet, FTP or Web
service.
2. You have disabled that service in menu 24.11.
3. The IP address in the Secured Client IP field (menu 24.11) does not match the client IP
address. If it does not match, the ZyWALL will disconnect the session immediately.
4. There is an SMT console session running.
5. There is already another remote management session with an equal or higher priority running.
You may only have one remote management session running at one time.
6. There is a firewall rule that blocks it.
37-2
Table 37-1 Menu 24.11 – Remote Management Control
DESCRIPTION EXAMPLE
23
LAN Only
(default)
0.0.0.0
No
Remote Management