Yamaha FWX120 User manual

Firewall
FWX120
User’s Manual
Thank you very much for purchasing Yamaha FWX120.
Please carefully read this manual before use to ensure
appropriate installation and configuration.
Please be sure to follow all the warnings and precautions
provided in this manual to ensure appropriate and safe use.
Please retain this manual in a safe place for future
reference.
Please
read
this manual
first
DOWNLOAD POWER STATUS LAN 1 LAN 2 microSD USB
LAN2
4321
ON STANDBY
CONSOLE
LAN1
EN

Introduction
Thank you very much for purchasing Yamaha FWX120.
This product is a firewall that is suitable for use in small and medium-sized enterprise networks.
• LANcable(x1)
• User'sManual(thismanual)
• CD-ROM(x1)
Outline of the product
• Whattheproductenablesyoutodo.....................................................12
• Nameandfunctionofindividualparts ..................................................14
Information on connecting to a network
• ConnectingtotheInternetasarouter ..................................................16
Other information
• Majorspecifications ..............................................................................51
This manual contains basic information only.
Please refer to the following manuals/Help content according to the necessity.
• Operation Manual (included in the attached CD-ROM):
Provides Internet connection methods, filter configurations, and
administrative and other information needed to fully utilize the product.
• Command Reference (included in the attached CD-ROM):
Provides information on detailed configurations available through console
commands.
• Help on the “Basic configuration page”:
Providesdetailedexplanationsontheconfigurableitemsofeachsetting
screen. Please click “Help” on the “Basic configuration page”.
Tip
The operation manual and command reference included in the attached
CD-ROMareprovidedinPDFformat.Acrobat®Reader®/Adobe®Reader®
fromAdobeSystemsIncorporatedisthusneededtoviewthePDFfiles.You
candownloadthelatestversionofAcrobatReader/AdobeReaderfromthe
Adobewebsiteforfree.PleasereadtheAcrobatReader/AdobeReaderHelp
pagefordetailsonusingAcrobatReader/AdobeReader.
Please ensure
you have all
the following
accessories.
Main content
of this manual
Please also
ensure to refer
to all the other
instruction
manuals.
2|FWX120User'sManual

Safety precautions
Please ensure to carefully read and observe the
following precautions in thereby ensuring safe use
of the product.
The precautions provided on pages 4 - 9 concern
safe and appropriate use of the product and on
preventing any risk to you and other people as well
as any physical damage.
Please ensure to retain it somewhere anyone using
the product can access at any time after having first
thoroughly read it.
This product is intended for use in general offices
and was not designed for use in any fields requiring
a high degree of reliability in the handling of human
lives or valuable assets.
Particular usage
in this manual
Abbreviations
The following company and product names will be
abbreviated as below in this manual.
• YamahaFWX120:Theproduct,thisproduct
• 10BASE-T/100BASE-TX/1000BASE-T cable:
LANcable
Concerning detailed
technical information
DetailedknowledgeoftheInternetandnetworks
may be required to fully utilize this product. The
attached manual does not describe any such
information and hence you will need to refer to
a commercially available guidebook or other
appropriate materials for more details.
• Nopartofthismanualmaybecopiedorused
in any form without prior permission from
Yamaha.
• The description in this manual is the latest
specification at the time of publication of the
document.Ifyouneedthelatestversionofthe
manual,youcandownloaditfromtheYamaha
website.
• Yamahacannotacceptanyliabilityforanyloss
of or damage to information resulting from any
use of the product. Please also note that the
warranty only covers physical damage to the
product.
FWX120User'sManual|3

Warning
• Ensuretoimmediatelyremovethepowerplugfromtheoutletinanyofthefollowingcases.
Failure to observe this may result in re or an electric shock. Please ensure to request the
dealer concerned to carry out any necessary repairs or inspections.
- Any abnormal odor or noise occurs.
- Smoke is emitted.
- The product is broken.
- The product has been exposed to water.
• Donothandletheproductorthepowercordwithwethands.
Failure to observe this could result in electric shock or damage to the product.
• Donotinsertanymetal,paper,orforeignobjectsintoagaponthemainunit.
Failuretoobservethiscouldresultinfire,electricshock,ordamagetotheproduct.
• Donotdisassembleoralterthisproductinanyway.
Failuretoobservethiscouldresultinfire,electricshock,ordamagetotheproduct.
• Avoiddamagingthepowercord.
Failuretoobservethiscouldresultinfire,electricshock,ordamagetotheproduct.
-Ensurenottoplaceanyheavyobjectsonthecord.
- Ensure not to process the cord in any way.
- Ensure not to use any staples to x the cord in place.
- Ensure not to apply excessive force to the cord.
- Ensure to keep the cord away from anything hot.
• Ensuretoonlyusethespeciedpowersupplyvoltage.
Useofanydifferentpowersupplyvoltagecouldresultinfire,electricshock,ordamagetotheproduct.
• Connectthepowerplugtoanoutletthatyoucanseeandreach.
Ensurethatyoucaneasilyremoveitifthenecessityarises.
• Ensuretofullyandsecurelyinsertthepowerplugintotheoutlet.
Beinginsufficientlyinsertedcouldresultinanelectricshock.Itcouldalsoleadtodustaccumulating
ontheplug,whichcouldthenresultinheatorfire.
• Verifythatthecurrentcapacityoftheoutletorapowerstripintherebyensuringthatuseof
the product does not exceed it.
Anyoverheatingordegradationofthepowerstripcouldresultinfire.
• Ensuretoonlyusecablesthatsuitthespecicationsoftheportconcerned.
Connectinganycableotherthanonewhichfitstheoriginallyintendedspecificationscouldresultin
fire or damage to the product.
• Donottouchanyoftheportswithyourngersoranythingmetallic.
Failure to observe this could result in electric shock or damage to the product.
4|FWX120User'sManual

• Ensurethattheproductisnotdroppedorsubjectedtoastrongimpact.
Theinternalpartscouldbreak,whichcouldthenresultinelectricshock,fire,ordamagetotheproduct.
• Donotinstalltheproductanywherewhereitwillbeexposedtowater,dustorhumidity,oily
smokeorsteam,orcorrosivegas.
Failuretoobservethiscouldresultinfire,electricshock,ordamagetotheproduct.
• Ensuregoodheatdissipation.
Failure to observe this could result in fire or damage to the product.
- Ensure not to cover the product with a cloth or tablecloth.
-Ensuretheproductdoesnotgetpushedintoanarrow,poorlyventilatedplace.
- Ensure the ventilation holes do not get blocked.
• Ensurenottotouchtheproductorthepowercordifyouhearthunder.
Failure to observe this could result in electric shock.
• Periodicallyremoveanydirtanddustfromthepowerplug.
Failure to observe this could result in fire.
• Placetheproductinhorizontalorientation.
Placingitupsidedownorinverticalorientationcouldresultinfire,electricshock,ordamagetothe
product.
FWX120User'sManual|5

Cautions
• Be sure not to install the product in an unstable location or where it will be exposed to
vibrations.
Itcouldfallorturnupsidedown,thusresultingininjuryordamagetotheproduct.
• Besurenottoinstalltheproductanywherewhereitwillbeexposedtodirectsunlightor
extraordinarilyhightemperatures(nearaheater,etc.).
Failure to observe this could result in damage to the product.
• Besurenottousetheproductanywherewhereitwillbeexposedtorapidchangesinambient
temperature.
Anyrapidchangeintheambienttemperaturecouldresultincondensationontheproduct,whichcould
thenresultindamagetotheproduct.Ensuretoleavetheproductforawhileuntilithasdriedoffwith
the power turned off if any condensation has occurred.
• Ensurenottostacktheproductwithotherequipment.
Failure to observe this could result in heat building up and damage to the product.
• Ensurenottoconnectanycableswhilethepowerison.
Failure to observe this could result in damage to the product and any connected equipment.
• Ensuretoearthanystaticelectricityfromyourbodyorclothingbeforetouchingtheproduct.
Failure to observe this could result in damage to the product.
• Powerofftheproductandthenremoveallthecablesbeforemovingit.
Theproductorconnectedequipmentcouldfallorturnupsidedown,thusresultingininjury.
6|FWX120User'sManual

• Ifyoutransfertheproductyouwillalsoneedto
transferthismanualandtheaccompanyingCD-
ROM.
• Alithiumbatter yisusedintheproductasapower
backupfortheclockfunction.Ensuretofollow
the instructions of your local government when
disposing of the battery.
• Whentransferring/disposingoftheproductplease
be sure to read “Instructions on transferring/
disposingoftheproduct”in“OperationManual”
(includedintheattachedCD-ROM)toperform
the following operations:
(1)DeletetheNetVolanteDNSregistration.
(2)Initializealltheconfigurations.
• A 1000BASE-T connection will require an
Enhanced Category 5 (CAT5e) or better LAN
cable.
Usage notes
• Please note that Yamaha cannot assume any
responsibility for any damage resulting from
improper use or configuration of the product.
• ConnectingaUSBdatacommunicationterminal
to the USB port of the product will enable a
wirelessWANconnectionviathe3G/LTEmobile
phonenetwork.Evenifthedatacommunication
terminal contract is a flat-rate system any use of it
with an improper configuration could be charged
for under the measured-rate system. Please note
that Yamaha cannot assume any responsibility
for any damage resulting from improper use or
configuration of the product.
• PleasenotethattheUSBportandmicroSDslot
of this product will not necessarily support all
typesofUSBmemorysticksandmicroSDcards.
• OperationofUSBmemorysticksandmicroSD
cards can be verified from the “Basic configuration
page” – “Advanced settings” – “Configure
externaldevice”screen–“Testperformanceof
externalmemory”.
• It is recommended that any data on a USB
memory stick or microSD card be periodically
backed up. Please note that Yamaha cannot
assume any responsibility for any damage
resulting from the loss or destruction of data
during usage of the product.
• Ensurenottoinstalltheproductanywhereitwill
beexposedtoanystrongmagneticfield.
• Donot connect anyequipmentthatgenerates
any noise on the same power line as the product.
• Use of the product can result in noise being
generatedintelephones,radios,andTVs.Ifany
noise does occur then please change the place
or direction in which the product is installed.
FWX120User'sManual|7

Important notice
Concerning the security measures
and rewall functionality of the
product
TheInternetisaconvenienttoolthatcanbeusedto
collect information available anywhere in the world
onwebsitesandtoexchangemessagesviae-mail.
However,itdoesincludetheriskofunauthorized
accesstoyourPC.
When you maintain a constant connection to the
Internet or have a server in place, in particular,
you need to understand the risk of unauthorized
access and utilize security measures. The product
is equipped with a firewall function as a security
measure but new unauthorized access methods
and loopholes (security holes) are constantly
being discovered and thus no completely infallible
preventionmethodexists.We would like you to
understand that an Internet connection always
includes risk and thus strongly recommend that
you constantly obtain the latest information
and implement security measures as your own
responsibility.
Concerning billing
When the product is used with a measured-rate
line service (for example: the 3G/LTE mobile
phonenetwork)pleaseensurethatyouthoroughly
understand the auto-outgoing call function prior
to use. Whenever the product is connected to the
InternetoraL ANitmonitorsallthedatasentbythe
softwareonyourPC(forexample:e-mailsoftware
or Web browser) and the addresses of the data
being transferred via the LAN. The inclusion of
anyotheraddressthanfromthe LANcan result
in auto-outgoing calls to the line taking place in
accordance with the preset configurations.
If an incorrect conguration is set or you
forget to disconnect the line the software or
equipment may send periodic packets which
can then result in unexpected communication
charges and/or provider connection fees.
Please ensure to check the communication
record and verify whether any unintended
communications have taken place. In addition,
we strongly recommend that you periodically visit
theYamahaNetworkDeviceswebsite(http://w ww.
yamaha.com/products/en/network/) to obtain
the latest information on the configurations and
revisions of the product.
Unexpected communication charges may
occur when you:
• Startusingtheproduct;
• Changeanyproviderconnectionsettingsofthe
product;
• InstallnewsoftwareonyourPC;
• ConnecttothenetworkwithanewPC,network
equipment,orperipheralequipment;
• Updatethefirmwareoftheproduct;or
• Perform any different operations than usual
or sense a difference in the communication
response.
NOTE
• After canceling/changing your provider contract
please ensure to delete or reconfigure the connection
configuration of the product. Failure to observe
this could result in unexpected charges from your
telephone carrier or provider.
• Unexpected communication charges could occur
according to the status (change in access point,
maintenance,error,etc.)oftheproviderside.Please
ensure to pay constant attention to any notifications
you receive from your provider.
Control of the cumulative access
period of the product
When the product is connected to a measured-
ratelineservice(forexample:the3G/LTEmobile
phone network) outgoing restrictions can be set
that are based on accumulative send/receive
data and the cumulative connection period. This
function is based on accumulative send/receive
data and cumulative connection period calculated
by the product and will not necessarily correspond
to the different billing calculation methods used
due to factors such as service discounts and
communication period calculation methods that
are unique to the provider concerned.
The outgoing restriction function may not therefore
alwaysworkasintendedinactualuse.Ifgreater
accuracy is required you will need to conduct
tests over a certain period of time to check for any
discrepancies.
8|FWX120User'sManual

Concerning trademarks
• Allthecompanyandproductnamesusedinthis
manual are registered trademarks or trademarks
of the companies concerned.
• This product is equipped with RSA® BSAFE™
software of RSA Security Inc.
RC4 and BSAFE are the
registered trademarks of RSA
Security Inc. in the U.S. and
other countries.
Open source software used
in the product
• PCRE
• MT19937
• OpenSSL
• OriginalSSLeay
• Net-SNMP
Please refer to “Operation Manual” (included in
the attached CD-ROM) for more details on the
pertinent license terms and conditions.
WARNING
ThisisaclassAproduct.Inadomesticenvironmentthisproductmaycauseradiointerference
in which case the user may be required to take adequate measures.
FWX120User'sManual|9

Concerning software license contracts
when using the DOWNLOAD button
By changing the configuration of the product the
DOWNLOAD button can be used to update its internal
firmware.
Changing the setting to enable the revision update
and performing a revision update by pressing the
DOWNLOAD button means that you have thereby
agreed with the software license contract (hereinafter
referred to as “the contract”). Please ensure that you
have read the contract before using it.
Ensure not to change the setting to permit firmware
revision update via the DOWNLOAD button if you do
not agree with this contract. Yamaha cannot assume
any responsibility for any damages resulting from
software or any other causes including negligence.
Please ensure to check “Operation Manual” (included
in the attached CD-ROM) for more details on using the
DOWNLOAD button.
Please ensure to retain this manual in a safe place for
future reference.
SOFTWARE LICENSE AGREEMENT
This License Agreement (the “AGREEMENT”)
is a legal agreement between you and Yamaha
Corporation (“YAMAHA”) under which YAMAHA is
providing the firmware of YAMAHA’s network products
(the “PRODUCT”) and related software program,
documentation and electronic files (collectively, the
“SOFTWARE”).
YAMAHA grants you a personal non-exclusive license
to use the SOFTWARE only for purposes of running it
on the PRODUCT.
This AGREEMENT applies to the SOFTWARE which
YAMAHA provides you and the installed copy thereof,
subject to the provision of 1-1 herein, into the PRODUCT
or personal computer owned by you.
1. GRANT OF LICENSE:
1-1. YAMAHA grants you a personal non-exclusive
license to install the SOFTWARE and use the
SOFTWARE on the PRODUCT or other devices,
including but not limited to the personal
computer, which you own.
1-2. You shall not assign, sublicense, sell, rent, lease,
loan, convey or otherwise transfer to any third
party, upload to a website or a server computer
to which specified or unspecified persons
may access, or copy, duplicate, translate or
convert to another programming language
the SOFTWARE except as expressly provided
herein. You shall not alter, modify, disassemble,
decompile or otherwise reverse engineer the
SOFTWARE and you also shall not have any third
party to do so.
1-3. You shall not modify, remove or delete a
copyright notice of YAMAHA contained in the
SOFTWARE.
1-4. Except as expressly provided herein, no license
or right, express or implied, is hereby conveyed
or granted by YAMAHA to you for any intellectual
property of YAMAHA.
2. OWNERSHIP AND COPYRIGHT:
The SOFTWARE is protected under the copyright laws
and owned by YAMAHA. You agree and acknowledge
that YAMAHA transfers neither ownership interest nor
intellectual property in the SOFTWARE to you under
this AGREEMENT or otherwise.
3. EXPORT RESTRICTIONS:
You agree to comply with all applicable export control
laws and regulations of the country involved, and not to
10|FWX120User'sManual

export or re-export, directly or indirectly, the SOFTWARE
in violation of any such laws and regulations.
4. SUPPORT AND UPDATE:
YAMAHA, YAMAHA's subsidiaries and affiliates,
their distributors and dealers are not responsible for
maintaining or helping you to use the SOFTWARE. No
updates, bug-fixes or support will be made available
to you for the SOFTWARE.
5. DISCLAIMER OF WARRANTY:
5-1. THE SOFTWARE IS PROVIDED “AS IS”
WITHOUT WARRANTY OF ANY KIND, EITHER
EXPRESS OR IMPLIED, INCLUDING, BUT
NOT LIMITED TO THE IMPLIED WARRANTIES
OF MERCHANTABILITY AND FITNESS FOR A
PARTICULAR PURPOSE.
5-2. IN NO EVENT SHALL YAMAHA, YAMAHA'S
SUBSIDIARIES AND AFFILIATES, THEIR
DISTRIBUTORS AND DEALERS BE LIABLE FOR
ANY DAMAGES WHATSOEVER (INCLUDING
WITHOUT LIMITATION, LOSS OF BUSINESS
PROFITS, LOSS OF BUSINESS INFORMATION,
LOSS OF BUSINESS INTERRUPTION OR OTHER
INCIDENTAL OR CONSEQUENTIAL DAMAGES)
ARISING OUT OF THE SOFTWARE, USE
THEREOF, OR INABILITY TO USE THEREOF
EVEN IF YAMAHA, YAMAHA'S SUBSIDIARIES
AND AFFILIATES, THEIR DISTRIBUTORS OR
DEALERS HAVE BEEN ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES. SOME
STATES DO NOT ALLOW THE LIMITATION OR
EXCLUSION OF LIABILITY FOR INCIDENTAL OR
CONSEQUENTIAL DAMAGES, SO THE ABOVE
LIMITATION OR EXCLUSION MAY NOT APPLY
TO YOU. SOME STATES DO NOT ALLOW THE
LIMITATION OR EXCLUSION OF LIABILITY FOR
INCIDENTAL OR CONSEQUENTIAL DAMAGES,
SO THE ABOVE LIMITATION OR EXCLUSION
MAY NOT APPLY TO YOU.
5-3. YAMAHA, YAMAHA'S SUBSIDIARIES AND
AFFILIATES, THEIR DISTRIBUTORS AND
DEALERS SHALL HAVE NO OBLIGATION TO
INDEMNIFY YOU AGAINST ANY CLAIM OR
SUIT BROUGHT BY A THIRD PARTY ALLEGING
THAT THE SOFTWARE OR USE THEREOF
INFRINGES ANY INTELLECTUAL PROPERTY OF
SUCH THIRD PARTY.
6. TERM:
6-1. This AGREEMENT becomes effective upon your
agreeing to the terms and conditions herein and
continues in effect unless or until terminated
in accordance with the provision of 6-2 or 6-3
herein.
6-2. You may terminate this AGREEMENT by deleting
the SOFTWARE installed into the PRODUCT.
6-3. This AGREEMENT will also terminate if you fail to
comply with any of the terms and conditions of
this AGREEMENT.
6-4. In case this AGREEMENT is terminated in
accordance with the provision 6-3, you shall
promptly delete the SOFTWARE.
6-5. Notwithstanding anything contains herein,
Sections 2 though 6 shall survive any termination
or expiration hereof.
7. SEPARABILITY:
In the event that any provision of this AGREEMENT is
declared or found to be illegal by any court or tribunal
of competent jurisdiction, such provision shall be null
and void with respect to the jurisdiction of that court
or tribunal and all the remaining provisions of this
AGREEMENT shall remain in full force and effect.
8.U.S.GOVERNMENTRESTRICTEDRIGHTS
NOTICE:
The Software is a “commercial item,” as that term is
defined at 48 C.F.R. 2.101 (Oct 1995), consisting of
“commercial computer software” and “commercial
computer software documentation,” as such terms
are used in 48 C.F.R. 12.212 (Sept 1995). Consistent
with 48 C.F.R. 12.212 and 48 C.F.R. 227.7202-1 through
227.72024 (June 1995), all U.S. Government End Users
shall acquire the Software with only those rights set
forth herein.
9. ACKNOWLEDGMENT:
You agree that this AGREEMENT is the complete and
exclusive statement of agreement between you and
YAMAHA concerning the subject matter hereof and
supersedes all proposals or prior agreements, verbal
or written, and any other communications between you
and the parties relating to the subject matter hereof.
NO amendment to this AGREEMENT shall be effective
unless signed by a duly authorized representative of
YAMAHA.
10.GOVERNINGLAW:
This AGREEMENT shall be governed by and construed
in accordance with the laws of Japan without reference
to the principles of conflict of laws.
FWX120User'sManual|11

What the product enables you to do
This product is a Gigabit Ethernet firewall that
is suitable for use in small and medium-sized
enterprise networks.
Transparent mode rewall function
With the transparentmodefirewall function, you
can improve security easily even in an environment
where its network configuration cannot be changed
often. The product can be installed without making
changes to the existing network configuration,
allowing you to add the firewall function without
stopping the operation.
Security advice function
The security advice function consists of three
functions: diagnosis, monitoring, and reporting
functions.
The “diagnosis function” checks for vulnerable
configurations before the operation is started.
The “monitoring function” monitors for intrusion
and attack attempts by attackers during operation.
You can see the network status intuitively by
viewing traffic and how errors occur with the
“reporting function“.
URL lter function
WhenallorpartsofaURLisregisteredaskeywords,
the URLfilter function can limit accesstoURLs
containing strings that match any of the keywords.
Fur thermore,thefiltercandenyaccessfromcertain
hostsornetworkswhensourceIPaddressesare
specifiedduringfiltersetup.ItcanalsolimitWeb
accessoverHTTPSwhentheproductrunsasa
proxyserver.
This allows you to limit Web access from network
users in your organization easily and appropriately.
DHCP terminal authentication function
When terminals are configured as allowed terminals
(registered terminals) or not-allowed terminals
(unregistered terminals), the function can check
if the terminals are allowed to access or not and
control which network each terminal can access.
Eachterminalcanbeconfiguredtohavedifferent
access rights. Forexample,registered terminals
can be configured to allow access to all networks in
andoutsideofthecompany,whereasunregistered
terminals can be configured to limit access to
specific segments in the company.
Policy-based ltering settings
A hierarchical definition of policies in security
settings makes it easy to understand what the
policies are intended for and easy to manage them.
You can create a rough rule and then go into details
gradually.
Getting information on and limiting use of le
sharing software
The product supports detecting and blocking traffic
fromthefilesharingsoftware“Winny”and“Share”.
WhenIntrusionDetectionSystemofthefirewallis
enabled,theproductcandetectpacketsusedby
“Winny”and“Share”,discardthosepackets,and
breaktheircommunication.Inaddition,if“Winny”
and“Share”packetsaredetected,theyareloggedto
thehistoryrecordsforIntrusionDetectionSystem.
The product can thus help identify terminals that
haveused“Winny”or“Share”.
Gigabit Ethernet and 3G/LTE mobile
communication support
The product is equipped with a dedicated WAN
port that can be connected to an FTTH, CATV,
orADSL broadbandmodem.Inaddition,mobile
Internetcanalsobeutilizedbyconnectinga3G/
LTEmobilenetworkdatacommunicationterminal
totheUSBport.
12|FWX120User'sManual

VirtualPrivateNetworkwithIPsecorL2TP/
IPsec
TheproductsupportsIPsecandL2TP/IPsec,and
data can thus be transferred more safely via the
creation of a Virtual Private Network (VPN) that
utilizestheInternet(broadband)connection.
Easy operation
• The “Basic configuration page” included with
this product for use with settings can be used to
change the basic configurations of the product
usingtheWebbrowserofyourPC.
•
MerelypressingtheDOWNLOADbuttonenables
revision updates (upgrade) of the internal
firmware.Ifanynewfunctionshavebeenadded
after you have purchased the product they can
beaccessedviaarevisionupdate.Inadditionto
directly downloading any firmware updates to the
mainunityoucanalsotransferthemfromaPC,
USBmemorystick,ormicroSDcard.
Compliance with various external memories
The configuration file and log of the product can
besavedincommerciallyavailableUSBmemory
sticksormicroSDcards.Inaddition,theproductcan
also be booted using firmware or a configuration
filesavedonaUSBmemorystickormicroSDcard.
Setting and management of Yamaha switches
supported
Theproduct,inconjunctionwithYamaha-proprietary
switches, can display the network configuration
and port status on its “Basic configuration page”.
In addition, individual port configurations of the
Yamaha switches and collective VLAN settings
both for the product and Yamaha switches are
also available.
Wide range of content available from the
Yamaha Network Devices website
You can visit http://www.yamaha.com/products/en/
network/ to see advanced usage examples and
detailedexplanationsoftheYamahafirewall.
FWX120User'sManual|13

Name and function of individual parts
cmicroSDlamp,button,slot
CommerciallyavailablemicroSDcardscanbeused
tocopytheconfigurationfile,savethelogfile,and
update the firmware.
BeforeejectingthemicroSDcard,ensuretofirst
cancel the connection by pressing and holding
downthemicroSDbuttonfortwoseconds.
NOTE
When removing the inserted microSD card and
then insertingitagain,pleaseensure thatithas
firstbeencompletelyejected.
dUSBlamp,button,port
ConnectingacommerciallyavailableUSBmemory
stickenablestheconfigurationfiletobecopied,the
logtobesaved,andthefirmwaretobeupdated.
Inaddition,communicationcanalsotakeplacevia
useofa3G/LTEmobilephonelinebyconnecting
a USB connection communication terminal.
Please refer to “Operation Manual” (included in
theattachedCD-ROM)formoredetails.
BeforeremovinganyUSBdevicespleasebesure
to cancel the connection by pressing and holding
downtheUSBbuttonfortwoseconds.
NOTE
DonotconnectaUSBdeviceotherthanaUSB
memory stick and a USB data communication
terminal. Failure to observe this could damage
the product.
eVentilator
This is a hole to release the internal heat.
Front panel/Top panel
aDOWNLOADbutton
Iftheproductwassettopermitrevisionupdates
viatheDOWNLOADbuttonthefirmwarecanbe
updated merely by pressing and holding down the
buttonforthreeseconds.Pleasereferto“Operation
Manual” (included in the attached CD-ROM) for
more details.
bLamps
The lamps indicate the operating status of the
product. Please refer to “Operation Manual”
(included in the attached CD-ROM) for the
relationship between the lamp light and the status
of the product.
•
POWER:
Indicates the current power status of
the product.
•
STATUS:
Indicatesthestatusofcommunication
with connected equipment.
•
LAN1:
IndicatestheusagestatusoftheLAN1
port.
•
LAN2:
IndicatestheusagestatusoftheLAN2
port.
14|FWX120User'sManual

Rear panel
aPower cord
bPOWERswitch
This switches the power status of the product to
ON/STANDBY.
cCONSOLEport
ForuseinconnectingtheRS-232Cterminals(serial
connector)ofPCswhenitisnecessarytoperform
configurations from the console. Please refer to
“OperationManual”(includedintheattachedCD-
ROM)formoredetails.
dLAN1ports
ThisportisconnectedtoaLANportonaPCora
portonahubwithaLANcable.
You can find the LINK/DATA lamp (left) and the
SPEEDlamp(right)beloweachLAN1port.
•
LINK/DATA lamp:
Off(linklost),litup(link
established), or flashing (transferring data)
according to the individual status of the link
concerned.
•
SPEED lamp:
Off(100BASE-TX/10BASE-T)or
litup(1000BASE-T)accordingtothespeedof
the connection.
eLAN2port
Thisportisconnectedtoamodem,router,orhub
withaLANcable.
You can find the LINK/DATA lamp (left) and the
SPEEDlamp(right)belowtheLAN2port.
ThelampworksjustlikethelampsfortheLAN1
ports.
Bottom panel
aEquipmentname
Provides the equipment name of the product.
bSerialnumber
Provides the serial number used to manage and
classify the product.
cMACaddress
Provides the network ID numbers unique to the
equipment onthe LAN1side andLAN2 side. In
theexampleof“00A0DE7EBF84”,“MAC-7EBF85”
provided in the figure above the individual MAC
addressesontheLAN1sideandLAN2sideare
as follows:
•
MAC address on the LAN1 side:
00A0DE7EBF84
•
MAC address on the LAN2 side:
00A0DE7EBF85
FWX120User'sManual|15

Preparation 1
Connecting a PC (or PCs) and your
broadband line to the product and
powering it on
Page 18
Preparation 2 Opening the “Basic conguration
page” Page 20
Preparation 3 Setting the password of the product Page 22
Preparation 4 Setting the date and time Page 27
Preparation 5 Conguring the IP address on the
LAN1 side of the product Page 29
Preparation 6 Changing the IP addresses of PCs in
the LAN Page 31
Preparation 7 Conguring provider information Page 32
Connecting to the Internet as a router
Flow of preparation steps
You must make preparations in the following order to use the product as a router:
Makethenecessarypreparationsforconfiguringnetwork
connections.
16|FWX120User'sManual

Ensure the following are available before beginning
preparations
LAN cables
ProvideLANcablesbasedonthenumberofPCsanddistance.
Hub
UptofourPCscanbedirectlyconnectedtotheLAN1portsoftheproduct.Ifyouwant
toconnectfiveormorePCs,useahub(forexample,aswitchinghub)thatsupports
10BASE-T,100BASE-TX,or1000BASE-T.
Information regarding the network to which the product is
connected
PredeterminetheIPaddresstobeassignedtotheLANsideoftheproduct.
NOTE
ToconnecttheproducttoanetworkthatusesaDHCPserver,youneedtodisabletheDHCP
serverfunctionoftheproduct.Todothis,refertotheoperationmanual.
Cautions when installing the product
Please carefully read and observe the “Safety precautions” of this manual when
installing the product.
FWX120User'sManual|17

Preparation 1
Making connections
Tip
• Tousetheproductasafirewall,referto“Connecting(toanexistingnetwork)asatransparentmodefirewall“
(OperationManual).
• ToconnecttheproducttotheInternetthroughaUSBdatacommunicationterminal,referto“Connectingtothe
InternetusingaUSBdatacommunicationterminal”(Page43).
ON
STANDBY
LAN 2
4
321
CONSOLE
LAN1
1 2 3 LAN 2
CONSOLE
STANDBY ON
SPEED
LINK/DATA
4
LAN 1
LAN
1Connect the LAN port of your PC to one of the LAN1 ports
of the product with a LAN cable.
2
ConnecttheLANportofyourcablemodem,ADSLmodem,
or ONU to the LAN2 port of the product with a LAN cable.
Please also refer to the document provided by your provider and instruction
manualsforADSLmodemandONU.
NOTE
Ifyouswitchanenvironmentinwhichacablemodem,anADSLmodem,oranONUisdirectly
connectedtoaPCtoaconnectionwiththeproduct,oraninstalledrouterisreplacedwith
theproduct,properconnectionsmaynotbemadebecause,forinstance,addressescannot
beobtained.Therefore,youmayneedtoconfiguresomesettings,toperformareset,orto
waitforaspecifiedperiodoftime(e.g.,atleast20minutes).Formoreinformation,follow
the instructions in the relevant manuals.
18|FWX120User'sManual

CONSOLE
SPEED
LINK/DATA
1234
STNDBY ON
LAN2
LAN2
4321
ON STANDBY
CONSOLE
LAN1
LAN1
3
4
3Plug the power cord of this product into an electrical outlet.
4
Place the POWER switch in the ON position.
ThePOWERlamplightsupafterflashingseveraltimes.
5
Power your PC or hub.
If the LAN1 and LAN2 lamps on the front panel light up or flash, the product is
correctlyconnectedtoyourPCorhub.
/If the LAN1 lamp does not light up or ash:
•CheckthattheLANcableiscorrectlyconnectedandyourPCorhubispoweredon.
•TheLAN1lampdoesnotlightuporflashunlessallthePCsandhubsthatareconnected
to the product are powered on.
/If the LAN2 lamp does not light up or ash:
CheckthattheADSLmodem(orcablemodemorONU)iscorrectlyconnectedtotheproduct
andtheADSLmodem(orcablemodemorONU)ispoweredon.
Now,theconnectingproceduresarecompleted.
Proceed with other preparations. Seepage 20
Plug into
an outlet
FWX120User'sManual|19

Preparation 2
Opening the “Basic conguration page”
Tochangetheconfigurationsoftheproduct,openthe“Basicconfigurationpage”
usingaWebbrowseronaPCconnectedtotheproduct.
Follow the steps below to open the “Basic configuration page”.
NOTE
• To use the “Basicconfigurationpage”,werecommendthatyouuseWindowsInternet
Explorer11.
• ThedescriptionsinthismanualuseInternetExplorer11screensasexamples.Forother
environments, you have slightly different screen displays, though operations stay the
same.
Tip
If you enter commands in a console window using Telnet software, you can configure
settingsinmoredetailcomparedtodoingtheminthe“Basicconfigurationpage”(console
commands).FordetailsonconnectingtotheproductusingTelnetsoftware,pleasereferto
theoperationmanual.Fordetailsonthecommandsavailableintheproduct,pleaserefer
to“CommandReference”(includedintheattachedCD-ROM).
20|FWX120User'sManual
Other manuals for FWX120
1
Table of contents
Other Yamaha Firewall manuals
Popular Firewall manuals by other brands

Fortinet
Fortinet FortiGate FortiGate-400 quick start guide

ZyXEL Communications
ZyXEL Communications ZyXEL ZyWALL 35 user guide

SonicWALL
SonicWALL 1RK53-116 Safety and regulatory information

Fortinet
Fortinet FortiAnalyzer-2000B Rack and hardware install guide

Tosibox
Tosibox Lock 200 quick start guide

ETIC
ETIC IPL-C user guide

CyberGuard
CyberGuard 2.0.1 user manual

Fortinet
Fortinet FortiGate FortiGate-1000 Administration guide

PaloAlto Networks
PaloAlto Networks PA-400 Series quick start guide

SonicWALL
SonicWALL CSa 1000 installation and replacement

PaloAlto Networks
PaloAlto Networks PA-220 Hardware reference

PaloAlto Networks
PaloAlto Networks PA-7000 Series Hardware reference