ZyXEL Communications ZyWall USG 2000 User Manual page 14

Table of Contents
7.1 How to Configure Interfaces, Port Grouping, and Zones ................................................... 121
7.1.1 Configure a WAN Ethernet Interface ........................................................................ 122
7.1.2 Configure Zones ....................................................................................................... 122
7.1.3 Configure Port Grouping .......................................................................................... 123
7.2 How to Configure a Cellular Interface ................................................................................ 124
7.3 How to Configure Load Balancing ..................................................................................... 126
7.3.1 Set Up Available Bandwidth on Ethernet Interfaces ................................................ 127
7.3.2 Configure the WAN Trunk ........................................................................................ 128
7.4 How to Set Up an IPSec VPN Tunnel ................................................................................ 129
7.4.1 Set Up the VPN Gateway ......................................................................................... 130
7.4.2 Set Up the VPN Connection ..................................................................................... 131
7.4.3 Configure Security Policies for the VPN Tunnel ....................................................... 132
7.5 How to Configure a Hub-and-spoke IPSec VPN Without a VPN Concentrator ................. 133
7.6 How to Configure User-aware Access Control .................................................................. 135
7.6.1 Set Up User Accounts .............................................................................................. 136
7.6.2 Set Up User Groups ................................................................................................. 136
7.6.3 Set Up User Authentication Using the RADIUS Server ........................................... 137
7.6.4 Web Surfing Policies With Bandwidth Restrictions .................................................. 139
7.6.5 Set Up MSN Policies ................................................................................................ 142
7.6.6 Set Up Firewall Rules ............................................................................................... 143
7.7 How to Use a RADIUS Server to Authenticate User Accounts based on Groups ............. 144
7.8 How to Use Endpoint Security and Authentication Policies ............................................... 146
7.8.1 Configure the Endpoint Security Objects ................................................................. 146
7.8.2 Configure the Authentication Policy ......................................................................... 148
7.9 How to Configure Service Control ..................................................................................... 149
7.9.1 Allow HTTPS Administrator Access Only From the LAN ......................................... 150
7.10 How to Allow Incoming H.323 Peer-to-peer Calls ........................................................... 152
7.10.1 Turn On the ALG .................................................................................................... 153
7.10.2 Set Up a NAT Policy For H.323 .............................................................................. 153
7.10.3 Set Up a Firewall Rule For H.323 .......................................................................... 155
7.11 How to Allow Public Access to a Web Server .................................................................. 156
7.11.1 Create the Address Objects ................................................................................... 157
7.11.2 Configure NAT ........................................................................................................ 157
7.11.3 Set Up a Firewall Rule ............................................................................................ 158
7.12 How to Use an IPPBX on the DMZ .................................................................................. 159
7.12.1 Turn On the ALG .................................................................................................... 161
7.12.2 Create the Address Objects ................................................................................... 161
7.12.3 Setup a NAT Policy for the IPPBX ......................................................................... 162
7.12.4 Set Up a WAN to DMZ Firewall Rule for SIP ......................................................... 163
7.12.5 Set Up a DMZ to LAN Firewall Rule for SIP ........................................................... 164
7.13 How to Use Multiple Static Public WAN IP Addresses for LAN to WAN Traffic ............... 165
7.13.1 Create the Public IP Address Range Object .......................................................... 165
7.13.2 Configure the Policy Route .................................................................................... 166
14
ZyWALL USG 2000 User's Guide