ZyXEL Communications ZyWALL 70 Bedienungsanleitung

ZyWALL 70

Internet Security Appliance

User’s Guide

Version 3.64

3/2005

ZyWALL 70 User’s Guide

The contents of this publication may not be reproduced in any part or as a whole, transcribed,

stored in a retrieval system, translated into any language, or transmitted in any form or by any

means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or

otherwise, without the prior written permission of ZyXEL Communications Corporation.

Disclaimer

ZyXEL does not assume any liability arising out of the application or use of any products, or

software described herein. Neither does it convey any license under its patent rights nor the

patent rights of others. ZyXEL further reserves the right to make changes in any products

described herein without notice. This publication is subject to change without notice.

Trademarks

ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL

Communications, Inc. Other trademarks mentioned in this publication are used for

identification purposes only and may be properties of their respective owners.

ZyWALL 70 User’s Guide

4 Federal Communications Commission (FCC) Interference Statement

Federal Communications

Commission (FCC) Interference

Statement

This device complies with Part 15 of FCC rules. Operation is subject to the following two

conditions:

• This device may not cause harmful interference.

• This device must accept any interference received, including interference that may cause

undesired operations.

This equipment has been tested and found to comply with the limits for a Class B digital

device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable

protection against harmful interference in a commercial environment. This equipment

generates, uses, and can radiate radio frequency energy, and if not installed and used in

accordance with the instructions, may cause harmful interference to radio communications.

If this equipment does cause harmful interference to radio/television reception, which can be

determined by turning the equipment off and on, the user is encouraged to try to correct the

interference by one or more of the following measures:

• Reorient or relocate the receiving antenna.

• Increase the separation between the equipment and the receiver.

• Connect the equipment into an outlet on a circuit different from that to which the receiver

is connected.

• Consult the dealer or an experienced radio/TV technician for help.

Notice 1

Changes or modifications not expressly approved by the party responsible for compliance

could void the user's authority to operate the equipment.

This Class B digital apparatus complies with Canadian ICES-003.

Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada.

Certifications

Go to www.zyxel.com

1Select your product from the drop-down list box on the ZyXEL home page to go to that

product's page.

2Select the certification you wish to view from this page.

ZyWALL 70 User’s Guide

Safety Warnings 5

Safety Warnings

For your safety, be sure to read and follow all warning notices and instructions.

• Do NOT open the device or unit. Opening or removing covers can expose you to

dangerous high voltage points or other risks. ONLY qualified service personnel can

service the device. Please contact your vendor for further information.

• Connect the power cord to the right supply voltage (110V AC in North America or 230V

AC in Europe).

• Place connecting cables carefully so that no one will step on them or stumble over them.

Do NOT allow anything to rest on the power cord and do NOT locate the product where

anyone can walk on the power cord.

• If you wall mount your device, make sure that no electrical, gas or water pipes will be

damaged.

• Do NOT install nor use your device during a thunderstorm. There may be a remote risk of

electric shock from lightning.

• Do NOT expose your device to dampness, dust or corrosive liquids.

• Do NOT use this product near water, for example, in a wet basement or near a swimming

pool.

• Make sure to connect the cables to the correct ports.

• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your

device.

• Do NOT store things on the device.

• Connect ONLY suitable accessories to the device.

ZyWALL 70 User’s Guide

6ZyXEL Limited Warranty

ZyXEL Limited Warranty

ZyXEL warrants to the original end user (purchaser) that this product is free from any defects

in materials or workmanship for a period of up to two years from the date of purchase. During

the warranty period, and upon proof of purchase, should the product have indications of failure

due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the

defective products or components without charge for either parts or labor, and to whatever

extent it shall deem necessary to restore the product or components to proper operating

condition. Any replacement will consist of a new or re-manufactured functionally equivalent

product of equal value, and will be solely at the discretion of ZyXEL. This warranty shall not

apply if the product is modified, misused, tampered with, damaged by an act of God, or

subjected to abnormal working conditions.

Note

Repair or replacement, as provided under this warranty, is the exclusive remedy of the

purchaser. This warranty is in lieu of all other warranties, express or implied, including any

implied warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in

no event be held liable for indirect or consequential damages of any kind of character to the

purchaser.

To obtain the services of this warranty, contact ZyXEL's Service Center for your Return

Material Authorization number (RMA). Products must be returned Postage Prepaid. It is

recommended that the unit be insured when shipped. Any returned products without proof of

purchase or those with an out-dated warranty will be repaired or replaced (at the discretion of

ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced products

will be shipped by ZyXEL to the corresponding return address, Postage Paid. This warranty

gives you specific legal rights, and you may also have other rights that vary from country to

country.

ZyWALL 70 User’s Guide

Customer Support 7

Customer Support

Please have the following information ready when you contact customer support.

• Product model and serial number.

• Warranty Information.

• Date that you received your device.

• Brief description of the problem and the steps you took to solve it.

METHOD

LOCATION

SUPPORT E-MAIL TELEPHONEAWEB SITE

REGULAR MAIL

SALES E-MAIL FAX FTP SITE

CORPORATE

HEADQUARTERS

(WORLDWIDE)

[email protected] +886-3-578-3942 www.zyxel.com

www.europe.zyxel.com

ZyXEL Communications Corp.

6 Innovation Road II

Science Park

Hsinchu 300

Taiw an

[email protected] +886-3-578-2439 ftp.zyxel.com

ftp.europe.zyxel.com

CZECH REPUBLIC

[email protected] +420 241 091 350 www.zyxel.cz ZyXEL Communications

Czech s.r.o.

Modranská 621

143 01 Praha 4 - Modrany

Ceská Republika

[email protected] +420 241 091 359

DENMARK

[email protected] +45 39 55 07 00 www.zyxel.dk ZyXELCommunicationsA/S

Columbus vej 5

2860 Soeborg

Denmark

[email protected] +45 39 55 07 07

FINLAND

[email protected] +358-9-4780-8411 www.zyxel.fi ZyXEL Communications Oy

Malminka ari 10

00700 Helsinki

Finland

[email protected] +358-9-4780 8448

FRANCE

[email protected] +33 (0)4 72 52 97 97 www.zyxel.fr Z y X E L F r a n c e

1 rue d es Ve rge rs

Bat. 1 / C

69760 Limonest

France

+33 (0)4 72 52 19 20

GERMANY

[email protected] +49-2405-6909-0 www.zyxel.de ZyXEL Deutschland GmbH.

Adenauerstr. 20/A2 D-52146

Wuerselen

Germany

[email protected] +49-2405-6909-99

NORTH AMERICA

[email protected] +1-800-255-4101

+1-714-632-0882

www.us.zyxel.com ZyXEL Communications Inc.

1130 N. Miller St.

Anaheim

CA 92806-2001

U.S.A.

[email protected] +1-714-632-0858 ftp.us.zyxel.com

NORWAY

[email protected] +47 22 80 61 80 www.zyxel.no ZyXELCommunicationsA/S

Nils Hansens vei 13

0667 Oslo

Norway

[email protected] +47 22 80 61 81

SPAIN

[email protected] +34 902 195 420 www.zyxel.es ZyXEL Communications

Alejandro Villegas 33

1º,28043Madrid

Spain

[email protected] +34 913 005 345

SWEDEN

[email protected] +46 31 744 7700 www.zyxel.se ZyXEL Communications A/S

Sjöporten 4, 41764 Göteborg

Sweden

[email protected] +46 31 744 7701

ZyWALL 70 User’s Guide

8Customer Support

UNITED KINGDOM

[email protected] +44 (0) 8702 909090 www.zyxel.co.uk ZyXEL Communications UK

Ltd.,11, The Courtyard,

Eastern Road, Bracknell,

Berkshire, RG12 2XB,

United Kingdom (UK)

[email protected] +44 (0) 8702 909091 ftp.zyxel.co.uk

a. “+” is the (prefix) number you enter to make an international telephone call.

METHOD

LOCATION

SUPPORT E-MAIL TELEPHONEAWEB SITE

REGULAR MAIL

SALES E-MAIL FAX FTP SITE

ZyWALL 70 User’s Guide

Table of Contents 9

Table of Contents

Copyright .................................................................................................................. 3

Federal Communications Commission (FCC) Interference Statement ............... 4

Safety Warnings ....................................................................................................... 5

ZyXEL Limited Warranty.......................................................................................... 6

Customer Support.................................................................................................... 7

Table of Contents ..................................................................................................... 9

List of Figures ........................................................................................................ 27

List of Tables .......................................................................................................... 39

Preface .................................................................................................................... 47

Chapter 1

Getting to Know Your ZyWALL ............................................................................. 49

1.1 ZyWALL 70 Internet Security Appliance Overview .............................................49

1.2 Physical Features ...............................................................................................49

1.2.1 Non-Physical Features .............................................................................51

1.3 Applications for the ZyWALL ..............................................................................56

1.3.1 Secure Broadband Internet Access via Cable or DSL Modem .................56

1.3.2 VPN Application ........................................................................................56

1.3.3 Front Panel LEDs .....................................................................................57

Chapter 2

Introducing the Web Configurator........................................................................ 59

2.1 Web Configurator Overview ...............................................................................59

2.2 Accessing the ZyWALL Web Configurator .........................................................59

2.3 Resetting the ZyWALL .......................................................................................60

2.3.1 Procedure To Use The Reset Button ........................................................61

2.3.2 Uploading a Configuration File Via Console Port .....................................61

2.4 Navigating the ZyWALL Web Configurator ........................................................62

2.4.1 Router Mode .............................................................................................62

2.4.2 Bridge Mode .............................................................................................64

2.4.3 Navigation Panel .......................................................................................66

2.4.4 System Statistics .......................................................................................69

2.4.4.1 Show Statistics: Line Chart .............................................................70

ZyWALL 70 User’s Guide

10 Table of Contents

2.4.5 DHCP Table Screen .................................................................................71

2.4.6 VPN Status ...............................................................................................72

Chapter 3

Wizard Setup .......................................................................................................... 75

3.1 Wizard Setup Overview ......................................................................................75

3.2 Internet Access .................................................................................................75

3.2.1 ISP Parameters ........................................................................................75

3.2.1.1 Ethernet ...........................................................................................75

3.2.1.2 PPPoE Encapsulation .....................................................................77

3.2.1.3 PPTP Encapsulation .......................................................................78

3.2.2 Internet Access Wizard Setup Complete ..................................................80

3.3 VPN Wizard ........................................................................................................81

3.3.1 Network Setting ........................................................................................83

3.3.2 IKE Tunnel Setting (IKE Phase 1) ............................................................85

3.3.3 IPSec Setting (IKE Phase 2) .....................................................................87

3.3.4 VPN Status Summary ...............................................................................88

3.3.5 VPN Wizard Setup Complete ...................................................................91

Chapter 4

LAN Screens........................................................................................................... 93

4.1 LAN Overview ....................................................................................................93

4.2 DHCP Setup .......................................................................................................93

4.2.1 IP Pool Setup ............................................................................................93

4.3 LAN TCP/IP ........................................................................................................93

4.3.1 Factory LAN Defaults ................................................................................93

4.3.2 IP Address and Subnet Mask ...................................................................94

4.3.3 RIP Setup .................................................................................................94

4.3.4 Multicast ....................................................................................................95

4.4 DNS Servers ......................................................................................................95

4.5 Configuring LAN .................................................................................................95

4.6 Configuring Static DHCP ....................................................................................98

4.7 Configuring IP Alias ............................................................................................99

Chapter 5

Bridge Screens..................................................................................................... 103

5.1 Bridge Loop ......................................................................................................103

5.2 Spanning Tree Protocol (STP) .........................................................................103

5.2.1 Rapid STP ..............................................................................................104

5.2.2 STP Terminology ....................................................................................104

5.2.3 How STP Works .....................................................................................104

5.2.4 STP Port States ......................................................................................105

5.3 Configuring Bridge ...........................................................................................105

Andere Handbücher für ZyWALL 70

Inhaltsverzeichnis

Andere ZyXEL Communications Tor Handbücher

ZyXEL Communications

ZyXEL Communications Prestige 661H Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications P-660HN-Fx series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications Prestige 662H Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZyXEL ZyWALL 50 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ISG50-ISDN Montage- und Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications EMG2306-R10A Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications p-2302rl series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications p-2302r series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications Prestige 660H Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications VMG1312-BX0D Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications EMG2881-T20A Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications P-2302HWUDL-P1 Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications 802.11g ADSL 2+ 4-Port Security Gateway HW-D... Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications P-2302HW-P1 Series Referenzhandbuch

ZyXEL Communications

ZyXEL Communications P-660HW-Tx v3 Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZyXEL ZyWALL USG-1000 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications SBG5500-A Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications P-660HW-D Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ADSL 2+ Security Gateway Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications Network Device P-2302 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications EMG8726-B10A Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications P-660H Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications Unified Security Gateway ZyWALL 300 Bedienungsanleitung

Beliebte Tor Handbücher anderer Marken

LST

LST M500RFE-AS Bedienungsanleitung

Kinnex

Kinnex Media Gateway Bedienungsanleitung

2N Telekomunikace

2N Telekomunikace 2N StarGate Bedienungsanleitung

Mitsubishi Heavy Industries

Mitsubishi Heavy Industries Superlink SC-WBGW256 Bedienungsanleitung

Telsey

Telsey CPVA 500 - SIP Bedienungsanleitung

RTA

RTA 460A-NNA4 Technisches Datenblatt

Shaw

Shaw Gateway HDPVR Bedienungsanleitung

ABB

ABB VSN900 Kurzanleitung

Commander

Commander Pulse Bedienungsanleitung

2N Telekomunikace

2N Telekomunikace ATEUS EasyGate 501309E Bedienungsanleitung

NETGEAR

NETGEAR C6300BD Bedienungsanleitung

Amit

Amit CDW531AM Bedienungsanleitung

HMS

HMS Netbiter EasyConnect EC150 Bedienungsanleitung

Huawei

Huawei EchoLife HG620 Bedienungsanleitung

AT&T

AT&T U-verse 3801 Gebrauchs- und Pflegehandbuch

Logic IO

Logic IO RTCU MX2 turbo Bedienungsanleitung

Suttle

Suttle MediaMAX MXM-521 Bedienungsanleitung

RTA

RTA 460MCBC-N2E Technisches Datenblatt