ZyXEL Communications ZyWALL 70 Bedienungsanleitung

ZyWALL 70

Internet Security Appliance

Quick Start Guide

Version 4.03

10/2007

Edition 1

DEFAULT LOGIN

IP Address http://192.168.1.1

User Name admin

Password 1234

CONTENTS

ENGLISH 2

DEUTSCH 19

ESPAÑOL 37

FRANÇAIS 54

ITALIANO 71

РУССКИЙ 88

简体中文 106

繁體中文 122

ENGLISH

Overview

The ZyWALL 70 is a load-balancing, dual WAN firewall with VPN, bandwidth management, content filtering,

anti-spam, anti-virus, IDP (Intrusion Detection and Protection) and many other features. You can use it as a

transparent firewall and not reconfigure your network nor configure the ZyWALL’s routing features. The

ZyWALL increases network security by providing DMZ ports for use with publicly accessible servers. This

guide covers the initial connections and configuration needed to start using the ZyWALL in your network.

See the User’s Guide for more information on all features.

You may need your Internet access information.

This guide is divided into the following sections.

1 Hardware Connections

You need the following.

1Hardware Connections

2Accessing the Web Configurator

3Bridge Mode

4Internet Access Setup and Product Registration

5DNS

6NAT

7Firewall

8VPN Rule Setup

9Anti-Spam Setup

10Troubleshooting

ZyWALL Computer Ethernet Cables Power Cord

ENGLISH

Do the following to make hardware connections for initial setup.

1Use an Ethernet cable to connect the LAN port to a computer. You can also use Ethernet cables to

connect public servers (web, e-mail, FTP, etc.) to the DMZ ports.

2Use another Ethernet cable(s) to connect the WAN 1 and/or WAN 2 port to an Ethernet jack with Internet

access.

3Insert the ZyWALL Turbo extension card to use the anti-virus and IDP features or insert a wireless LAN

card to use the wireless LAN feature. See the ZyWALL Turbo Card guide for more information about the

extension card. See the user’s guide about installing a wireless LAN card.

4Use the included power cord to connect the power socket (on the rear panel) to a power outlet.

5Push the power switch to the on position and look at the front panel. The PWR LED turns on. The SYS

LED blinks while performing system testing and then stays on if the testing is successful. The ACT, CARD,

LAN, DMZ, and WAN LEDs turn on and stay on if the corresponding connections are properly made.

ENGLISH

2 Accessing the Web Configurator

Use this section to configure the WAN 1 interface for Internet access.

5The HOME screen opens.

The ZyWALL is in router mode by default. Continue to the next step if you want to use routing features

such as NAT, DHCP and VPN.

Go to Section 3 if you prefer to use the ZyWALL as a transparent firewall.

1Launch your web browser. Enter 192.168.1.1 (the

ZyWALL’s default IP address) as the address.

If the login screen does not display, see Section

10.1 to set your computer’s IP address.

2Click Login (the default password 1234 is already

entered).

3Change the login password by entering a new

password and clicking Apply.

4Click Apply to replace the ZyWALL’s default

digital certificate.

ENGLISH

6Check the

Network

Status

table. If the

WAN 1

status is not

Down and

there is an

IP address,

go to

Section 5.

If the WAN

1status is

Down (or

there is not

an IP

address),

click the

Wizard icon

and use

Section 4 to configure WAN 1.

Use the NETWORK WAN screens if you need to configure WAN 2. You can also configure load balancing

between the WAN ports.

3 Bridge Mode

When you set the ZyWALL to bridge mode, it functions as a transparent firewall. Do the following to set the

ZyWALL to bridge mode.

ENGLISH

4 Internet Access Setup and Product Registration

1Click the Wizard icon in the HOME screen and then

Internet Access Setup to open the Internet access

wizard.

Enter the Internet access information exactly as given to

you.

If you were given an IP address to use, select Static in the

IP Address Assignment drop-down list box and enter the

information provided.

Note: The fields vary depending on what you select in

the Encapsulation field. Fill them in with the

information provided by the ISP or network

administrator.

Click Apply when you are done.

1Click MAINTENANCE in

the navigation panel and

then Device Mode.

2Select Bridge and

configure a (static) IP

address subnet mask and

gateway IP address for

the ZyWALL’s LAN, WAN,

DMZ and WLAN

interfaces.

3Click Apply. The ZyWALL

restarts.

Skip to Section 5 if you have

servers that you need to be

accessible from the WAN.

ENGLISH

• PPP over Ethernet or PPTP Encapsulation

Select Nailed-Up when you want your connection up all the time (this could be expensive if your ISP bills you

for Internet usage time instead of a flat monthly fee).

To not have the connection up all the time, specify an idle time-out period (in seconds) in Idle Timeout.

•Ethernet Encapsulation

Configure a Roadrunner service in the

NETWORK WAN screens (use the WAN 1

tab).

ENGLISH

2Click Next to display the screen where you

can register your ZyWALL with myZyXEL.com

(ZyXEL’s online services center) and activate

the free content filtering, anti-spam, anti-virus

and IDP trial applications. Otherwise, click

Skip and then Close to complete Internet

access setup.

Note: Make sure you have installed the ZyWALL Turbo Card before you activate the IDP and anti-virus

subscription services.

Turn the ZyWALL off before you install or remove the ZyWALL Turbo Card.

3If you already have an account at

myZyXEL.com, select Existing

myZyXEL.com account and enter account

information. Otherwise, select New

myZyXEL.com account and fill in the

fields below to create a new account and

4Wait for the registration progress to finish.

ENGLISH

5The following screen displays if the registration

was not successful. Click Return to go back to

the Device Registration screen and check your

settings.

6Click Close to leave the wizard screen when

the registration and activation are done.

Note: If you want to activate a standard

service with your iCard’s PIN number

(license key), use the

REGISTRATION Service screen.

See the user’s guide for details.

5 DMZ

The DeMilitarized Zone (DMZ) allows public servers (web, e-mail, FTP, etc.) to be visible to the outside world

and still have firewall protection from DoS (Denial of Service) attacks.

Unlike the LAN, the ZyWALL does not assign TCP/IP configuration via DHCP to computers connected to the

DMZ ports. Configure the computers with static IP addresses (in the same subnet as the DMZ port's IP

address) and DNS server addresses. Use the ZyWALL's DMZ IP address as the default gateway.

Do the following to configure the DMZ if the ZyWALL is in routing mode.

Note: You do not need to configure DMZ with bridge mode, skip to Section 7.

1Click NETWORK, DMZ in the navigation panel.

ENGLISH

6 NAT

NAT (Network Address Translation - NAT, RFC 1631) means the translation of an IP address in one network

to a different IP address in another. You can use the NAT Address Mapping screens to have the ZyWALL

translate multiple public IP addresses to multiple private IP addresses on your LAN (or DMZ).

The following example allows access from the WAN to an HTTP (web) server on the DMZ. The server has a

private IP address of 10.0.0.20.

2Specify an IP address and subnet mask for the

DMZ interface.

If you use private IP addresses on the DMZ,

use NAT to make the servers publicly

accessible (see Section 6).

A public IP address must be on a separate

subnet from the WAN port’s public IP address.

If you do not configure NAT for the public IP

addresses on the DMZ, the ZyWALL routes

traffic to the public IP addresses on the DMZ

without performing NAT. This may be useful for

hosting servers for NAT unfriendly

applications.

3Click Apply.

Andere Handbücher für ZyWALL 70

Inhaltsverzeichnis

Sprachen:

Andere ZyXEL Communications Tor Handbücher

ZyXEL Communications

ZyXEL Communications 802.11g ADSL 2+ 4-Port Security Gateway HW-D... Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications P-870HN-5xb Handbuch

ZyXEL Communications

ZyXEL Communications N4100 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications G.SHDSL.bis 4-port Security Gateway P-793H Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZYWALL - CLI Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications SBG3300-N000 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications 2R-P1C Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ISG50-ISDN Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ADSL2+ Ethernet/USB Gateway 660RU-Tx Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications NSG50 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications VSG1432 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications P-2302R-P1 Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications P-661HW-D Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications VSG1435-B101 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZYAIR B-2000 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications P-660HU-Tx Bedienerhandbuch

ZyXEL Communications

ZyXEL Communications AMG1202-T series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZYAIR B-4000 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZyXEL ZyWALL 5 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications Prestige 662H Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications EMG2881-T20A Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications p-661hw series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications EMG2926-Q10A Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications VMG1312-T10C Bedienungsanleitung

Beliebte Tor Handbücher anderer Marken

LST

LST M500RFE-AS Bedienungsanleitung

Kinnex

Kinnex Media Gateway Bedienungsanleitung

2N Telekomunikace

2N Telekomunikace 2N StarGate Bedienungsanleitung

Mitsubishi Heavy Industries

Mitsubishi Heavy Industries Superlink SC-WBGW256 Bedienungsanleitung

Telsey

Telsey CPVA 500 - SIP Bedienungsanleitung

RTA

RTA 460A-NNA4 Technisches Datenblatt

Shaw

Shaw Gateway HDPVR Bedienungsanleitung

ABB

ABB VSN900 Kurzanleitung

Commander

Commander Pulse Bedienungsanleitung

2N Telekomunikace

2N Telekomunikace ATEUS EasyGate 501309E Bedienungsanleitung

NETGEAR

NETGEAR C6300BD Bedienungsanleitung

Amit

Amit CDW531AM Bedienungsanleitung

HMS

HMS Netbiter EasyConnect EC150 Bedienungsanleitung

Huawei

Huawei EchoLife HG620 Bedienungsanleitung

AT&T

AT&T U-verse 3801 Gebrauchs- und Pflegehandbuch

Logic IO

Logic IO RTCU MX2 turbo Bedienungsanleitung

Suttle

Suttle MediaMAX MXM-521 Bedienungsanleitung

RTA

RTA 460MCBC-N2E Technisches Datenblatt