ZyXEL Communications ZyWALL 310 Series Manuals

Manuals and User Guides for ZyXEL Communications ZyWALL 310 Series. We have 1 ZyXEL Communications ZyWALL 310 Series manual available for free PDF download: User Manual

ZyXEL Communications ZyWALL 310 Series User Manual

ZyXEL Communications ZyWALL 310 Series User Manual (562 pages)

VPN Firewall

Brand: ZyXEL Communications | Category: Firewall | Size: 13.44 MB

Table of Contents

Table of Contents
3
Chapter 1 Introduction

17
- Overview
  17
- Management Overview
  19
- Web Configurator
  20
- Web Configurator Access
  20
- Web Configurator Screens Overview
  21
- Site Map
  22
- Navigation Panel
  25
- Configuration Menu
  26
- Tables and Lists
  28
- Installation Setup Wizard
  33
- Installation Setup Wizard Screens
  33
- Internet Access Setup - WAN Interface
  33
- Internet Access: Ethernet
  34
- Internet Access: Pppoe
  34
- Internet Access: PPTP
  35
- ISP Parameters
  35
- Internet Access - Finish
  36
- Hardware Introduction
  37
- Default Zones, Interfaces, and Ports
  37
Chapter 3 Hardware Introduction

37
- Stopping the Zywall
  38
- Rack-Mounting
  38
- Wall-Mounting
  39
- Front Panel Leds
  39
- Rear Panels
  41
Chapter 4 Quick Setup Wizards

43
Chapter 5 Dashboard

69
- Overview
  69
- What You Can Do in this Chapter
  69
- The Dashboard Screen
  69
- The CPU Usage Screen
  74
- The Memory Usage Screen
  75
- The Active Sessions Screen
  75
- The VPN Status Screen
  76
- The DHCP Table Screen
  77
- The Number of Login Users Screen
  78
Chapter 6 Monitor

79
- Overview
  79
- What You Can Do in this Chapter
  79
- The Port Statistics Screen
  80
- The Port Statistics Graph Screen
  81
- Interface Status Screen
  82
- The Traffic Statistics Screen
  86
- The Session Monitor Screen
  89
- The DDNS Status Screen
  91
- IP/MAC Binding Monitor
  91
- The Login Users Screen
  92
- Cellular Status Screen
  93
- More Information
  95
- USB Storage Screen
  96
- The Ipsec Monitor Screen
  97
- Regular Expressions in Searching Ipsec Sas
  98
- The SSL Connection Monitor Screen
  99
- The L2TP over Ipsec Session Monitor Screen
  99
- Log Screen
  100
- Interfaces
  103
- Interface Overview
  103
- What You Can Do in this Chapter
  103
- What You Need to Know
  103
Chapter 7 Interfaces

103
- Relationships between Interfaces
  105
- What You Need to Do First
  108
- Port Role Screen
  108
- Ethernet Summary Screen
  109
- Ethernet Edit
  110
- Object References
  122
- Add/Edit Dhcpv6 Request/Release Options
  123
- Add/Edit DHCP Extended Options
  124
- PPP Interfaces
  125
- PPP Interface Summary
  126
- PPP Interface Add or Edit
  127
- Cellular Configuration Screen (3G)
  132
- Cellular Add/Edit Screen
  134
- Tunnel Interfaces
  140
- Configuring a Tunnel
  142
- Tunnel Add or Edit Screen
  143
- VLAN Interfaces
  147
- VLAN Summary Screen
  148
- VLAN Add/Edit
  150
- Bridge Interfaces
  159
- Bridge Summary
  160
- Bridge Add/Edit
  162
- Virtual Interfaces
  170
- Virtual Interfaces Add/Edit
  171
- Interface Technical Reference
  172
Chapter 8 Trunk

177
- Overview
  177
- What You Can Do in this Chapter
  177
- What You Need to Know
  177
- The Trunk Summary Screen
  180
- Configuring a User-Defined Trunk
  181
- Configuring the System Default Trunk
  183
- Policy and Static Routes
  187
- Policy and Static Routes Overview
  187
- What You Can Do in this Chapter
  187
- What You Need to Know
  188
- Policy Route Screen
  189
- Policy Route Edit Screen
  191
- IP Static Route Screen
  195
- Static Route Add/Edit Screen
  196
- Policy Routing Technical Reference
  197
- Routing Protocols
  199
- Routing Protocols Overview
  199
- What You Can Do in this Chapter
  199
- What You Need to Know
  199
- The RIP Screen
  199
Chapter 10 Routing Protocols

199
- The OSPF Screen
  201
- Configuring the OSPF Screen
  204
- OSPF Area Add/Edit Screen
  206
- Virtual Link Add/Edit Screen
  208
- Routing Protocol Technical Reference
  208
- Zones
  211
- Zones Overview
  211
- What You Can Do in this Chapter
  211
- What You Need to Know
  211
Chapter 11 Zones

211
- The Zone Screen
  212
- Zone Edit
  213
Chapter 12 DDNS

215
- DDNS Overview
  215
- What You Can Do in this Chapter
  215
- What You Need to Know
  215
- The DDNS Screen
  216
- The Dynamic DNS Add/Edit Screen
  217
Chapter 13 NAT

221
- NAT Overview
  221
- What You Can Do in this Chapter
  221
- What You Need to Know
  221
- The NAT Screen
  222
- The NAT Add/Edit Screen
  223
- NAT Technical Reference
  225
Chapter 14 HTTP Redirect

229
- Overview
  229
- What You Can Do in this Chapter
  229
- What You Need to Know
  229
- The HTTP Redirect Screen
  230
- The HTTP Redirect Edit Screen
  231
Chapter 15 ALG

233
- ALG Overview
  233
- What You Can Do in this Chapter
  233
- What You Need to Know
  233
- Before You Begin
  236
- The ALG Screen
  236
- ALG Technical Reference
  238
Chapter 16 IP/MAC Binding

241
- IP/MAC Binding Overview
  241
- What You Can Do in this Chapter
  241
- What You Need to Know
  241
- IP/MAC Binding Summary
  242
- IP/MAC Binding Edit
  242
- Static DHCP Edit
  243
- IP/MAC Binding Exempt List
  244
- Inbound Load Balancing
  247
- Inbound Load Balancing Overview
  247
- What You Can Do in this Chapter
  247
- The Inbound LB Screen
  248
- The Inbound LB Add/Edit Screen
  249
- The Inbound LB Member Add/Edit Screen
  251
- Authentication Policy
  253
- Overview
  253
- What You Can Do in this Chapter
  253
- What You Need to Know
  253
- Authentication Policy Screen
  254
- Creating/Editing an Authentication Policy
  256
- User-Aware Access Control Example
  258
- Set up User Accounts
  258
- Set up User Groups
  259
- Set up User Authentication Using the RADIUS Server
  259
- User Group Authentication Using the RADIUS Server
  261
Chapter 19 Firewall

265
- Overview
  265
- What You Can Do in this Chapter
  265
- What You Need to Know
  265
- The Firewall Screen
  268
- Configuring the Firewall Screen
  268
- The Firewall Add/Edit Screen
  272
- The Session Limit Screen
  273
- The Session Limit Add/Edit Screen
  275
- Firewall Rule Configuration Example
  276
- Firewall Rule Example Applications
  278
- Ipsec VPN
  281
- Virtual Private Networks (VPN) Overview
  281
- What You Can Do in this Chapter
  282
- What You Need to Know
  283
- Before You Begin
  284
- The VPN Connection Screen
  285
- The VPN Connection Add/Edit (IKE) Screen
  286
- The VPN Connection Add/Edit Manual Key Screen
  292
- The VPN Gateway Screen
  294
- The VPN Gateway Add/Edit Screen
  295
- VPN Concentrator
  301
- VPN Concentrator Requirements and Suggestions
  302
- VPN Concentrator Screen
  302
- The VPN Concentrator Add/Edit Screen
  302
- Zywall Ipsec VPN Client Configuration Provisioning
  303
- Ipsec VPN Background Information
  305
- Ssl Vpn
  317
- Overview
  317
- What You Can Do in this Chapter
  317
- What You Need to Know
  317
- The SSL Access Privilege Screen
  318
- The SSL Access Policy Add/Edit Screen
  319
- The SSL Global Setting Screen
  322
- How to Upload a Custom Logo
  323
- SSL VPN Example
  324
- SSL User Screens
  327
- Overview
  327
- What You Need to Know
  327
- Remote SSL User Login
  328
- The SSL VPN User Screens
  331
- Bookmarking the Zywall
  332
- Logging out of the SSL VPN User Screens
  333
- SSL User Application Screen
  333
- SSL User File Sharing
  334
- The Main File Sharing Screen
  334
- Opening a File or Folder
  335
- Downloading a File
  336
- Saving a File
  336
- Creating a New Folder
  337
- Renaming a File or Folder
  337
- Deleting a File or Folder
  338
- Uploading a File
  338
- Zywall Secuextender
  341
- The Zywall Secuextender Icon
  341
- Status
  341
Chapter 23 Zywall Secuextender

341
- View Log
  342
- Suspend and Resume the Connection
  343
- Stop the Connection
  343
- Uninstalling the Zywall Secuextender
  343
- L2Tp Vpn
  345
- Overview
  345
- What You Can Do in this Chapter
  345
- What You Need to Know
  345
- L2TP VPN Screen
  347
Chapter 25 Bandwidth Management

349
- Overview
  349
- What You Can Do in this Chapter
  349
- What You Need to Know
  349
- The Bandwidth Management Screen
  353
- The Bandwidth Management Add/Edit Screen
  355
Chapter 26 Device HA

359
- Overview
  359
- What You Can Do in this Chapter
  359
- What You Need to Know
  359
- Before You Begin
  360
- Device HA General
  360
- The Active-Passive Mode Screen
  361
- Configuring Active-Passive Mode Device HA
  363
- Configuring an Active-Passive Mode Monitored Interface
  365
- Device HA Technical Reference
  366
Chapter 27 User/Group

371
- Overview
  371
- What You Can Do in this Chapter
  371
- What You Need to Know
  371
- User Summary Screen
  373
- User Add/Edit Screen
  374
- User Group Summary Screen
  376
- Group Add/Edit Screen
  377
- The User/Group Setting Screen
  378
- Default User Authentication Timeout Settings Edit Screens
  380
- User Aware Login Example
  381
- User /Group Technical Reference
  382
- Addresses
  384
- Overview
  384
- What You Can Do in this Chapter
  384
- What You Need to Know
  384
- Address Summary Screen
  384
Chapter 28 Addresses

384
- Ipv4 Address Add/Edit Screen
  386
- Ipv6 Address Add/Edit Screen
  387
- Address Group Summary Screen
  388
- Address Group Add/Edit Screen
  389
Chapter 29 Services

390
- Overview
  390
- What You Can Do in this Chapter
  390
- What You Need to Know
  390
- The Service Summary Screen
  391
- The Service Add/Edit Screen
  392
- The Service Group Summary Screen
  393
- The Service Group Add/Edit Screen
  394
- Schedules
  396
- Overview
  396
- What You Can Do in this Chapter
  396
- What You Need to Know
  396
Chapter 30 Schedules

396
Chapter 31 AAA Server

400
- Overview
  400
- Directory Service (AD/LDAP)
  400
- RADIUS Server
  400
- Asas
  401
- What You Can Do in this Chapter
  401
- What You Need to Know
  401
- Active Directory or LDAP Server Summary
  403
- Adding an Active Directory or LDAP Server
  403
- RADIUS Server Summary
  406
- Adding a RADIUS Server
  406
- Authentication Method
  409
- Overview
  409
- What You Can Do in this Chapter
  409
- Before You Begin
  409
- Example: Selecting a VPN Authentication Method
  409
Chapter 32 Authentication Method

409
- Authentication Method Objects
  410
- Creating an Authentication Method Object
  410
- Certificates
  413
- Overview
  413
- What You Can Do in this Chapter
  413
- What You Need to Know
  413
Chapter 33 Certificates

413
- Verifying a Certificate
  415
- The My Certificates Screen
  416
- The My Certificates Add Screen
  417
- The My Certificates Edit Screen
  419
- The My Certificates Import Screen
  422
- The Trusted Certificates Screen
  423
- The Trusted Certificates Edit Screen
  424
- The Trusted Certificates Import Screen
  427
- Certificates Technical Reference
  428
- ISP Accounts
  429
- Overview
  429
- What You Can Do in this Chapter
  429
- ISP Account Summary
  429
Chapter 34 ISP Accounts

429
- ISP Account Edit
  430
Chapter 35 SSL Application

432
- Overview
  432
- What You Can Do in this Chapter
  432
- What You Need to Know
  432
- Example: Specifying a Web Site for Access
  433
- The SSL Application Screen
  434
- Creating/Editing an SSL Application Object
  435
- Dhcpv6
  438
- Overview
  438
- What You Can Do in this Chapter
  438
- The Dhcpv6 Request Screen
  438
Chapter 36 Dhcpv6

438
- Dhcpv6 Request Add/Edit Screen
  439
- The Dhcpv6 Lease Screen
  439
- Dhcpv6 Lease Add/Edit Screen
  440
- System
  443
- Overview
  443
- What You Can Do in this Chapter
  443
- Host Name
  444
- USB Storage
  444
- Date and Time
  445
- Pre-Defined NTP Time Servers List
  448
- Time Server Synchronization
  448
- Console Port Speed
  449
- DNS Overview
  450
- DNS Server Address Assignment
  450
- Configuring the DNS Screen
  450
- Address Record
  452
- PTR Record
  452
- Adding an Address/Ptr Record
  453
- Domain Zone Forwarder
  453
- Adding a Domain Zone Forwarder
  453
- MX Record
  454
- Adding a MX Record
  454
- Adding a DNS Service Control Rule
  455
- WWW Overview
  456
- Service Access Limitations
  456
- System Timeout
  456
- Https
  456
- Configuring WWW Service Control
  457
- Service Control Rules
  460
- Customizing the WWW Login Page
  461
- HTTPS Example
  465
- Ssh
  472
- How SSH Works
  473
- SSH Implementation on the Zywall
  474
- Requirements for Using SSH
  474
- Configuring SSH
  474
- Secure Telnet Using SSH Examples
  475
- Telnet
  476
- Configuring Telnet
  476
- Ftp
  478
- Configuring FTP
  478
- Snmp
  479
- Supported Mibs
  480
- SNMP Traps
  481
- Configuring SNMP
  481
- Language Screen
  483
- Ipv6 Screen
  483
- Log and Report
  485
- Overview
  485
- What You Can Do in this Chapter
  485
- Email Daily Report
  485
- Log Setting Screens
  487
- Log Setting Summary
  487
- Edit System Log Settings
  489
- Edit Log on USB Storage Setting
  491
- Edit Remote Server Log Settings
  493
- Log Category Settings Screen
  495
- File Manager
  499
- Overview
  499
- What You Can Do in this Chapter
  499
- What You Need to Know
  499
Chapter 39 File Manager

499
- Comments in Configuration Files or Shell Scripts
  500
- Command Mode
  500
- The Configuration File Screen
  501
- The Firmware Package Screen
  505
- The Shell Script Screen
  507
- Diagnostics
  510
- Overview
  510
- What You Can Do in this Chapter
  510
- The Diagnostic Screen
  510
Chapter 40 Diagnostics

510
- The Diagnostics Files Screen
  511
- The Packet Capture Screen
  512
- The Packet Capture Files Screen
  514
- Core Dump Screen
  515
- Core Dump Files Screen
  516
- The System Log Screen
  516
- Packet Flow Explore
  518
- Overview
  518
- What You Can Do in this Chapter
  518
- The Routing Status Screen
  518
- The SNAT Status Screen
  522
Chapter 42 Reboot

525
- Overview
  525
- What You Need to Know
  525
- The Reboot Screen
  525
- Shutdown
  526
- Overview
  526
- What You Need to Know
  526
- The Shutdown Screen
  526
Chapter 43 Shutdown

526
Chapter 44 Troubleshooting

527
- Resetting the Zywall
  535
- Getting more Troubleshooting Help
  536
Appendix A Legal Information

537
- Index
  541

Advertisement

Advertisement

Related Products

ZyXEL Communications Categories

Network Router

Switch

Switch Wireless Router Adapter

More ZyXEL Communications Manuals