ZyXEL Communications USG40 Bedienungsanleitung

Quick Start Guide

www.zyxel.com

ZyWALL/USG Series

ZyWALL 110 / 310 / 1100

USG40 / USG40W / USG60 / USG60W / USG110 / USG210 /

USG310 / USG1100 / USG1900

Security Firewalls

Version 4.10

Edition 2, 07/2014

User’s Guide

Default Login Details

LAN Port IP Address https://192.168.1.1

User Name admin

Password 1234

ZyWALL/USG Series User’s Guide

IMPORTANT!

READ CAREFULLY BEFORE USE.

KEEP THIS GUIDE FOR FUTURE REFERENCE.

This is a User’s Guide for a series of products. Not all products support all firmware features.

Screenshots and graphics in this book may differ slightly from your product due to differences in

your product firmware or your computer operating system. Every effort has been made to ensure

that the information in this manual is accurate.

Related Documentation

•QuickStartGuide

The Quick Start Guide shows how to connect the ZyWALL/USG and access the Web Configurator

wizards. (See the wizard real time help for information on configuring each screen.) It also

contains a connection diagram and package contents list.

• CLI Reference Guide

The CLI Reference Guide explains how to use the Command-Line Interface (CLI) to configure the

ZyWALL/USG.

Note: It is recommended you use the Web Configurator to configure the ZyWALL/USG.

• Web Configurator Online Help

Click the help icon in any screen for help in configuring that screen and supplementary

information.

ZyWALL/USG Series User’s Guide

Part I: User’s Guide .........................................................................................18

Chapter 1

Introduction.........................................................................................................................................20

1.1 Overview ...........................................................................................................................................20

1.1.1 Applications .............................................................................................................................20

1.2 Management Overview .....................................................................................................................23

1.3 Web Configurator ..............................................................................................................................24

1.3.1 Web Configurator Access ........................................................................................................24

1.3.2 Web Configurator Screens Overview ......................................................................................26

1.3.3 Navigation Panel .....................................................................................................................30

1.3.4 Tables and Lists .......................................................................................................................36

Chapter 2

Installation Setup Wizard...................................................................................................................39

2.1 Installation Setup Wizard Screens ...................................................................................................39

2.1.1 Internet Access Setup - WAN Interface ..................................................................................39

2.1.2 Internet Access: Ethernet .......................................................................................................40

2.1.3 Internet Access: PPPoE ..........................................................................................................41

2.1.4 Internet Access: PPTP ...........................................................................................................43

2.1.5 ISP Parameters .......................................................................................................................43

2.1.6 Internet Access Setup - Second WAN Interface ......................................................................44

2.1.7 Internet Access - Device Registration ....................................................................................45

2.1.8 Internet Access - Finish ..........................................................................................................45

Chapter 3

Hardware, Interfaces and Zones .......................................................................................................46

3.1 Overview ...........................................................................................................................................46

3.1.1 Front Panels ............................................................................................................................46

3.1.2 Rear Panels .............................................................................................................................47

3.1.3 Default Zones, Interfaces, and Ports .......................................................................................48

3.2 Mounting ...........................................................................................................................................50

3.2.1 Rack-mounting ........................................................................................................................50

3.2.2 Wall-mounting ..........................................................................................................................51

3.3 Stopping the ZyWALL/USG ..............................................................................................................51

Chapter 4

Quick Setup Wizards..........................................................................................................................52

4.1 Quick Setup Overview .......................................................................................................................52

4.2 WAN Interface Quick Setup ..............................................................................................................53

4.2.1 Choose an Ethernet Interface ..................................................................................................53

4.2.2 Select WAN Type .....................................................................................................................54

4.2.3 Configure WAN IP Settings .....................................................................................................54

ZyWALL/USG Series User’s Guide

4.2.4 ISP and WAN and ISP Connection Settings ............................................................................55

4.2.5 Quick Setup Interface Wizard: Summary ................................................................................57

4.3 VPN Setup Wizard ............................................................................................................................58

4.3.1 Welcome ..................................................................................................................................59

4.3.2 VPN Setup Wizard: Wizard Type .............................................................................................59

4.3.3 VPN Express Wizard - Scenario .............................................................................................60

4.3.4 VPN Express Wizard - Configuration .....................................................................................61

4.3.5 VPN Express Wizard - Summary ...........................................................................................62

4.3.6 VPN Express Wizard - Finish .................................................................................................62

4.3.7 VPN Advanced Wizard - Scenario .........................................................................................63

4.3.8 VPN Advanced Wizard - Phase 1 Settings .............................................................................64

4.3.9 VPN Advanced Wizard - Phase 2 ...........................................................................................66

4.3.10 VPN Advanced Wizard - Summary ......................................................................................67

4.3.11 VPN Advanced Wizard - Finish .............................................................................................67

4.4 VPN Settings for Configuration Provisioning Wizard: Wizard Type ..................................................68

4.4.1 Configuration Provisioning Express Wizard - VPN Settings ...................................................69

4.4.2 Configuration Provisioning VPN Express Wizard - Configuration ..........................................70

4.4.3 VPN Settings for Configuration Provisioning Express Wizard - Summary .............................71

4.4.4 VPN Settings for Configuration Provisioning Express Wizard - Finish ...................................72

4.4.5 VPN Settings for Configuration Provisioning Advanced Wizard - Scenario ...........................73

4.4.6 VPN Settings for Configuration Provisioning Advanced Wizard - Phase 1 Settings ..............74

4.4.7 VPN Settings for Configuration Provisioning Advanced Wizard - Phase 2 ............................75

4.4.8 VPN Settings for Configuration Provisioning Advanced Wizard - Summary ..........................76

4.4.9 VPN Settings for Configuration Provisioning Advanced Wizard- Finish .................................77

4.5 VPN Settings for L2TP VPN Settings Wizard ...................................................................................78

4.5.1 L2TP VPN Settings ..................................................................................................................79

4.5.2 L2TP VPN Settings ..................................................................................................................80

4.5.3 VPN Settings for L2TP VPN Setting Wizard - Summary ........................................................81

4.5.4 VPN Settings for L2TP VPN Setting Wizard Completed ........................................................82

Chapter 5

Dashboard...........................................................................................................................................83

5.1 Overview ...........................................................................................................................................83

5.1.1 What You Can Do in this Chapter ............................................................................................83

5.2 Main Dashboard Screen ...................................................................................................................83

5.2.1 Device Information Screen ......................................................................................................85

5.2.2 System Status Screen .............................................................................................................86

5.2.3 VPN Status Screen ..................................................................................................................87

5.2.4 DHCP Table Screen ................................................................................................................88

5.2.5 Number of Login Users Screen ...............................................................................................89

5.2.6 System Resources Screen ......................................................................................................90

5.2.7 CPU Usage Screen .................................................................................................................91

5.2.8 Memory Usage Screen ............................................................................................................91

ZyWALL/USG Series User’s Guide

5.2.9 Active Session Screen .............................................................................................................92

5.2.10 Extension Slot Screen ...........................................................................................................93

5.2.11 Interface Status Summary Screen .........................................................................................94

5.2.12 Secured Service Status Screen .............................................................................................96

5.2.13 Content Filter Statistics Screen .............................................................................................96

5.2.14 Top 5 Viruses Screen .............................................................................................................97

5.2.15 Top 5 Intrusions Screen .........................................................................................................97

5.2.16 Top 5 IPv4/IPv6 Security Policy Rules that Blocked Traffic Screen .......................................98

5.2.17 The Latest Alert Logs Screen ................................................................................................98

Part II: Technical Reference..........................................................................100

Chapter 6

Monitor...............................................................................................................................................102

6.1 Overview .........................................................................................................................................102

6.1.1 What You Can Do in this Chapter ..........................................................................................102

6.2 The Port Statistics Screen ..............................................................................................................103

6.2.1 The Port Statistics Graph Screen .........................................................................................104

6.3 Interface Status Screen ...................................................................................................................105

6.4 The Traffic Statistics Screen ............................................................................................................108

6.5 The Session Monitor Screen .......................................................................................................... 110

6.6 IGMP Statistics ................................................................................................................................ 112

6.7 The DDNS Status Screen ............................................................................................................... 113

6.8 IP/MAC Binding ............................................................................................................................... 113

6.9 The Login Users Screen ................................................................................................................ 114

6.10 Cellular Status Screen ................................................................................................................... 115

6.10.1 More Information ................................................................................................................. 117

6.11 The UPnP Port Status Screen ...................................................................................................... 118

6.12 USB Storage Screen ..................................................................................................................... 119

6.13 Wireless .......................................................................................................................................120

6.13.1 Wireless AP Information: AP List .........................................................................................120

6.13.2 Wireless AP Information: Radio List ....................................................................................121

6.13.3 Wireless Station Info ............................................................................................................122

6.14 The IPSec Monitor Screen ............................................................................................................123

6.14.1 Regular Expressions in Searching IPSec SAs ....................................................................124

6.15 The SSL Screen ............................................................................................................................124

6.16 The L2TP over IPSec Session Monitor Screen .............................................................................125

6.17 The App Patrol Screen ..................................................................................................................125

6.18 The Content Filter Screen .............................................................................................................127

6.19 The IDP Screen .............................................................................................................................128

6.20 The Anti-Virus Screen ...................................................................................................................130

ZyWALL/USG Series User’s Guide

6.21 The Anti-Spam Screens ................................................................................................................132

6.21.1 Anti-Spam Report ................................................................................................................132

6.21.2 The Anti-Spam Status Screen .............................................................................................135

6.22 The SSL Inspection Screens .........................................................................................................136

6.22.1 Certificate Cache List ..........................................................................................................137

6.23 Log Screens ..................................................................................................................................138

6.23.1 View Log ..............................................................................................................................138

6.23.2 View AP Log ........................................................................................................................140

Chapter 7

Licensing...........................................................................................................................................143

7.1 Registration Overview .....................................................................................................................143

7.1.1 What you Need to Know ........................................................................................................143

7.1.2 Registration Screen ...............................................................................................................144

7.1.3 Service Screen ......................................................................................................................144

7.2 Signature Update ............................................................................................................................145

7.2.1 What you Need to Know ........................................................................................................145

7.2.2 The Anti-Virus Update Screen ...............................................................................................145

7.2.3 The IDP/AppPatrol Update Screen ........................................................................................147

Chapter 8

Interfaces...........................................................................................................................................149

8.1 Interface Overview ..........................................................................................................................149

8.1.1 What You Can Do in this Chapter ..........................................................................................149

8.1.2 What You Need to Know ........................................................................................................150

8.1.3 What You Need to Do First ....................................................................................................154

8.2 Port Role Screen .............................................................................................................................154

8.3 Ethernet Summary Screen ..............................................................................................................155

8.3.1 Ethernet Edit .........................................................................................................................157

8.3.2 Object References .................................................................................................................173

8.3.3 Add/Edit DHCPv6 Request/Release Options ........................................................................173

8.3.4 Add/Edit DHCP Extended Options ........................................................................................174

8.4 PPP Interfaces ................................................................................................................................176

8.4.1 PPP Interface Summary ........................................................................................................176

8.4.2 PPP Interface Add or Edit .....................................................................................................177

8.5 Cellular Configuration Screen .........................................................................................................182

8.5.1 Cellular Choose Slot .............................................................................................................185

8.5.2 Add Cellular Configuration .....................................................................................................185

8.6 Tunnel Interfaces ............................................................................................................................191

8.6.1 Configuring a Tunnel .............................................................................................................193

8.6.2 Tunnel Add or Edit Screen .....................................................................................................194

8.7 VLAN Interfaces .............................................................................................................................198

8.7.1 VLAN Summary Screen ........................................................................................................199

ZyWALL/USG Series User’s Guide

8.7.2 VLAN Add/Edit ......................................................................................................................201

8.8 Bridge Interfaces ............................................................................................................................210

8.8.1 Bridge Summary .................................................................................................................... 211

8.8.2 Bridge Add/Edit .....................................................................................................................213

8.9 Virtual Interfaces ............................................................................................................................221

8.9.1 Virtual Interfaces Add/Edit .....................................................................................................221

8.10 Interface Technical Reference .......................................................................................................223

8.11 Trunk Overview ............................................................................................................................226

8.11.1 What You Need to Know ......................................................................................................226

8.12 The Trunk Summary Screen .........................................................................................................229

8.12.1 Configuring a User-Defined Trunk .......................................................................................230

8.12.2 Configuring the System Default Trunk ................................................................................232

Chapter 9

Routing ..............................................................................................................................................234

9.1 Policy and Static Routes Overview .................................................................................................234

9.1.1 What You Can Do in this Chapter ..........................................................................................234

9.1.2 What You Need to Know .......................................................................................................235

9.2 Policy Route Screen ........................................................................................................................236

9.2.1 Policy Route Edit Screen .......................................................................................................238

9.3 IP Static Route Screen ....................................................................................................................243

9.3.1 Static Route Add/Edit Screen ................................................................................................243

9.4 Policy Routing Technical Reference ................................................................................................245

9.5 Routing Protocols Overview ...........................................................................................................246

9.5.1 What You Need to Know ........................................................................................................246

9.6 The RIP Screen ...............................................................................................................................246

9.7 The OSPF Screen ...........................................................................................................................248

9.7.1 Configuring the OSPF Screen ...............................................................................................251

9.7.2 OSPF Area Add/Edit Screen ................................................................................................252

9.7.3 Virtual Link Add/Edit Screen .................................................................................................254

9.8 Routing Protocol Technical Reference ............................................................................................255

Chapter 10

DDNS..................................................................................................................................................257

10.1 DDNS Overview ............................................................................................................................257

10.1.1 What You Can Do in this Chapter ........................................................................................257

10.1.2 What You Need to Know ......................................................................................................257

10.2 The DDNS Screen ........................................................................................................................258

10.2.1 The Dynamic DNS Add/Edit Screen ....................................................................................259

Chapter 11

NAT.....................................................................................................................................................263

11.1 NAT Overview ...............................................................................................................................263

ZyWALL/USG Series User’s Guide

11.1.1 What You Can Do in this Chapter ........................................................................................263

11.1.2 What You Need to Know ......................................................................................................263

11.2 The NAT Screen ............................................................................................................................263

11.2.1 The NAT Add/Edit Screen ....................................................................................................265

11.3 NAT Technical Reference ..............................................................................................................267

Chapter 12

HTTP Redirect...................................................................................................................................270

12.1 Overview .......................................................................................................................................270

12.1.1 What You Can Do in this Chapter ........................................................................................270

12.1.2 What You Need to Know ......................................................................................................270

12.2 The HTTP Redirect Screen ...........................................................................................................271

12.2.1 The HTTP Redirect Edit Screen ..........................................................................................272

Chapter 13

ALG ....................................................................................................................................................274

13.1 ALG Overview ...............................................................................................................................274

13.1.1 What You Need to Know ......................................................................................................274

13.1.2 Before You Begin .................................................................................................................277

13.2 The ALG Screen ...........................................................................................................................277

13.3 ALG Technical Reference .............................................................................................................280

Chapter 14

UPnP ..................................................................................................................................................282

14.1 UPnP and NAT-PMP Overview .....................................................................................................282

14.2 What You Need to Know ...............................................................................................................282

14.2.1 NAT Traversal ......................................................................................................................282

14.2.2 Cautions with UPnP and NAT-PMP .....................................................................................283

14.3 UPnP Screen ................................................................................................................................283

14.4 Technical Reference ......................................................................................................................284

14.4.1 Turning on UPnP in Windows 7 Example ............................................................................284

14.4.2 Using UPnP in Windows XP Example .................................................................................286

14.4.3 Web Configurator Easy Access ...........................................................................................288

Chapter 15

IP/MAC Binding.................................................................................................................................291

15.1 IP/MAC Binding Overview .............................................................................................................291

15.1.1 What You Can Do in this Chapter ........................................................................................291

15.1.2 What You Need to Know ......................................................................................................291

15.2 IP/MAC Binding Summary ............................................................................................................292

15.2.1 IP/MAC Binding Edit ............................................................................................................292

15.2.2 Static DHCP Edit .................................................................................................................293

15.3 IP/MAC Binding Exempt List .........................................................................................................294

ZyWALL/USG Series User’s Guide

Chapter 16

Inbound Load Balancing..................................................................................................................296

16.1 Inbound Load Balancing Overview ...............................................................................................296

16.1.1 What You Can Do in this Chapter ........................................................................................296

16.2 The Inbound LB Screen ................................................................................................................297

16.2.1 The Inbound LB Add/Edit Screen ........................................................................................298

16.2.2 The Inbound LB Member Add/Edit Screen ..........................................................................300

Chapter 17

Web Authentication .........................................................................................................................302

17.1 Web Auth Overview ......................................................................................................................302

17.1.1 What You Can Do in this Chapter ........................................................................................302

17.1.2 What You Need to Know ......................................................................................................303

17.2 Web Authentication Screen ...........................................................................................................303

17.2.1 Creating Exceptional Services .............................................................................................306

17.2.2 Creating/Editing an Authentication Policy ............................................................................306

17.3 SSO Overview ...............................................................................................................................307

17.4 SSO - ZyWALL/USG Configuration ..............................................................................................309

17.4.1 Configuration Overview .......................................................................................................309

17.4.2 Configure the ZyWALL/USG to Communicate with SSO ....................................................309

17.4.3 Enable Web Authentication .................................................................................................310

17.4.4 Create a Security Policy ...................................................................................................... 311

17.4.5 Configure User Information .................................................................................................312

17.4.6 Configure an Authentication Method ...................................................................................313

17.4.7 Configure Active Directory ...................................................................................................314

17.5 SSO Agent Configuration ..............................................................................................................315

Chapter 18

Security Policy..................................................................................................................................319

18.1 Overview .......................................................................................................................................319

18.1.1 What You Can Do in this Chapter ........................................................................................319

18.1.2 What You Need to Know ......................................................................................................320

18.2 The Security Policy Screen ...........................................................................................................321

18.2.1 Configuring the Security Policy Control Screen ...................................................................322

18.2.2 The Security Policy Control Add/Edit Screen ......................................................................325

18.3 Anomaly Detection and Prevention Overview ...............................................................................327

18.3.1 The Anomaly Detection and Prevention General Screen ....................................................327

18.3.2 Creating New ADP Profiles ................................................................................................328

18.3.3 Traffic Anomaly Profiles ......................................................................................................329

18.3.4 Protocol Anomalies ..............................................................................................................332

18.4 The Session Control Screen .........................................................................................................334

18.4.1 The Session Control Add/Edit Screen .................................................................................336

18.5 Security Policy Example Applications ...........................................................................................337

ZyWALL/USG Series User’s Guide

Chapter 19

IPSec VPN..........................................................................................................................................340

19.1 Virtual Private Networks (VPN) Overview .....................................................................................340

19.1.1 What You Can Do in this Chapter ........................................................................................342

19.1.2 What You Need to Know ......................................................................................................343

19.1.3 Before You Begin .................................................................................................................345

19.2 The VPN Connection Screen ........................................................................................................345

19.2.1 The VPN Connection Add/Edit (IKE) Screen .......................................................................346

19.3 The VPN Gateway Screen ............................................................................................................353

19.3.1 The VPN Gateway Add/Edit Screen ....................................................................................354

19.4 VPN Concentrator ........................................................................................................................361

19.4.1 VPN Concentrator Requirements and Suggestions ............................................................361

19.4.2 VPN Concentrator Screen ...................................................................................................362

19.4.3 The VPN Concentrator Add/Edit Screen .............................................................................362

19.5 ZyWALL/USG IPSec VPN Client Configuration Provisioning .......................................................363

19.6 IPSec VPN Background Information .............................................................................................365

Chapter 20

SSL VPN ............................................................................................................................................375

20.1 Overview .......................................................................................................................................375

20.1.1 What You Can Do in this Chapter ........................................................................................375

20.1.2 What You Need to Know ......................................................................................................375

20.2 The SSL Access Privilege Screen ................................................................................................376

20.2.1 The SSL Access Privilege Policy Add/Edit Screen .............................................................377

20.3 The SSL Global Setting Screen ....................................................................................................380

20.3.1 How to Upload a Custom Logo ............................................................................................381

20.4 ZyWALL/USG SecuExtender ........................................................................................................382

20.4.1 Example: Configure ZyWALL/USG for SecuExtender .........................................................383

Chapter 21

SSL User Screens.............................................................................................................................386

21.1 Overview .......................................................................................................................................386

21.1.1 What You Need to Know ......................................................................................................386

21.2 Remote SSL User Login ...............................................................................................................387

21.3 The SSL VPN User Screens .........................................................................................................390

21.4 Bookmarking the ZyWALL/USG ....................................................................................................391

21.5 Logging Out of the SSL VPN User Screens ..................................................................................392

21.6 SSL User Application Screen ........................................................................................................392

21.7 SSL User File Sharing ...................................................................................................................393

21.7.1 The Main File Sharing Screen .............................................................................................393

21.7.2 Opening a File or Folder ......................................................................................................394

21.7.3 Downloading a File ..............................................................................................................395

21.7.4 Saving a File ........................................................................................................................395

Andere Handbücher für USG40

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere ZyXEL Communications Firewall Handbücher

ZyXEL Communications

ZyXEL Communications ZyWALL 1050 Handbuch

ZyXEL Communications

ZyXEL Communications ZyWALL 1050 Referenzhandbuch

ZyXEL Communications

ZyXEL Communications ZyWALL 110 Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZYWALL OTPV2 - Handbuch

ZyXEL Communications

ZyXEL Communications ZyWALL SSL 10 Handbuch

ZyXEL Communications

ZyXEL Communications ZyWALL 110 Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications USG40 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ADSL 2+ Security Gateway Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ADSL 2+ Security Gateway Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZyWALL 110 Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZyXEL ZyWALL USG-1000 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZyWall Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ENTERPRISE NETWORK CENTER Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZyWALL 1050 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZyWALL 1050 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZyXEL Prestige 310 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZyWALL 110 Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZyXEL ZyWALL 35 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZyWALL SEM-DUAL Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZyWALL SSL 10 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZyWall ATP series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZyWALL 1050 Referenzhandbuch

ZyXEL Communications

ZyXEL Communications ZyWALL 1050 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZyXEL ZyWALL IDP 10 Handbuch

Beliebte Firewall Handbücher anderer Marken

Cisco

Cisco S190 Bedienungsanleitung

Fortinet

Fortinet FortiGate Voice Series Bedienungsanleitung

ADTRAN

ADTRAN NetVanta 2300 Bedienungsanleitung

SecureLogix

SecureLogix ETM System Bedienungsanleitung

NETGEAR

NETGEAR ProSafe FVX538 Bedienungsanleitung

Lanner

Lanner FW-8877 Bedienungsanleitung

Huawei

Huawei USG6000 Series Installations- und Betriebshandbuch

H3C

H3C SecPath F5000-AI-15 Bedienungsanleitung

Nexcom

Nexcom DNA 1150 Bedienungsanleitung

Fortinet

Fortinet FortiGate-60 series Bedienungsanleitung

Cisco

Cisco 3110 Handbuch

Draytek

Draytek Vigor2860 Series Bedienungsanleitung

Lanner electronics

Lanner electronics FW-7650 Series Bedienungsanleitung

Swisscom

Swisscom Internet Backup Bedienungsanleitung

SonicWALL

SonicWALL NSa 5700 Bedienungsanleitung

DPtech

DPtech FW1000 SERIES Bedienungsanleitung

FEITIAN

FEITIAN MultiPass FIDO Bedienungsanleitung

EBLOCKER

EBLOCKER PRO Bedienungsanleitung