ZyXEL Communications ADSL 2+ Security Gateway User manual

Copyright © 2007. All rights reserved.
ZyWALL 2 Plus
Internet Security Appliance
Quick Start Guide
Version 4.03
10/2007
Edition 1
DEFAULT LOGIN
IP Address http://192.168.1.1
User Name admin
Password 1234
CONTENTS
ENGLISH 1
DEUTSCH 15
ESPAÑOL 31
FRANÇAIS 47
ITALIANO 63
РУССКИЙ 79
SVENSKA 95
简体中文 109
繁體中文 123

ENGLISH
1
Overview
The ZyWALL 2 Plus is a firewall with VPN, bandwidth management, content filtering and
many other features. You can use it as a transparent firewall and not reconfigure your
network nor configure the ZyWALL’s routing features. This guide covers the initial
connections and configuration needed to start using the ZyWALL in your network.
See the User’s Guide for more information on all features.
You may need your Internet access information.
This guide is divided into the following sections.
1 Hardware Connections
You need the following.
1Hardware Connections
2Accessing the Web Configurator
3Bridge Mode
4Internet Access Setup and Product
Registration
5Firewall
6VPN Rule Setup
ZyWALL Computer Ethernet Cables Power Adaptor
ENGLISH

ENGLISH
2
Do the following to make hardware connections for initial setup.
1Use an Ethernet cable to connect a LAN port to a computer.
2Use an Ethernet cable to connect the WAN port to your broadband modem or router.
"Use the blue console cable if you want to connect the CONSOLE port to
your computer. Use the black dial backup cable if you want to connect the
DIAL BACKUP port to an analog modem.
3Use the included power adaptor to connect the power socket (on the rear panel) to a
power outlet.

ENGLISH
3
4Look at the front panel. The PWR LED blinks during start-up and stays green once the
ZyWALL is ready. The ACT, LAN and WAN LEDs turn on and stay on if the
corresponding connections are properly made.
VIf none of the LEDs are on, check your connections, and inspect your
cables for damage. Make sure that you have the power adaptor connected
to the ZyWALL and plugged in to an appropriate power source. Make sure
the power source is turned on. If the LEDs are still off, contact your local
vendor.
2 Accessing the Web Configurator
Use this section to configure the WAN interface for Internet access.
1Launch your web browser. Enter
192.168.1.1 (the ZyWALL’s default IP
address) as the address.
2Click Login (the default password 1234
is already entered).

ENGLISH
4
VIf the login screen does not display, check your browser’s security settings
and make sure your computer’s Ethernet card is installed and functioning
properly.
Your computer should be also set to get an IP address automatically from a
DHCP server. See Set Up Your Computer’s IP Address for more
information.
VIf you changed the password and have forgotten it, you need to return the
ZyWALL to the defaults (password is 1234, LAN IP address is 192.168.1.1,
etc.). Press the RESET button (on the rear panel) until the PWR LED starts
to blink, then release it.
5The HOME screen opens.
The ZyWALL is in router mode by default. Continue to the next step if you want to use
routing features such as NAT, DHCP and VPN.
Go to Section 3if you prefer to use the ZyWALL as a transparent firewall.
6Check the network status table. If the WAN status is not Down and there is an IP
address, go to Section 5.
3Change the login password by entering a
new password and clicking Apply.
4Click Apply to replace the ZyWALL’s
default digital certificate.

ENGLISH
5
If the WAN status is Down (or there is not an IP address), click the wizard icon and use
Section 4to configure the WAN.
3 Bridge Mode
When you set the ZyWALL to bridge mode, it functions as a transparent firewall. Do the
following to set the ZyWALL to bridge mode.
4 Internet Access Setup and Product Registration
1Click the wizard icon in the HOME screen and then the Internet Access Setup link to
open the Internet access wizard.
1Click MAINTENANCE in the
navigation panel and then
Device Mode.
2Select Bridge and configure a
(static) IP address, subnet
mask and gateway IP
address. These apply to the
ZyWALL’s LAN and WAN
interfaces.
3Click Apply. The ZyWALL
restarts.

ENGLISH
6
Enter the Internet access information exactly as given to you.
If you were given an IP address to use, select Static in the IP Address Assignment drop-
down list box and enter the information provided.
"The fields vary depending on what you select in the Encapsulation field.
Fill them in with the information provided by the ISP or network
administrator.
Click Apply when you are done.
•PPP over Ethernet or PPTP Encapsulation
Select Nailed-Up when you want your connection up all the time (this could be expensive
if your ISP bills you for Internet usage time instead of a flat monthly fee).
•Ethernet Encapsulation
Configure a Roadrunner service in
the NETWORK WAN screens (use
the WAN tab).

ENGLISH
7
To not have the connection up all the time, specify an idle time-out period (in seconds) in
Idle Timeout.
2Click Next to display the
screen where you can
register your ZyWALL with
myZyXEL.com (ZyXEL’s
online services center)
and activate the free
content filtering trial
application. Otherwise,
click Skip and then Close
to complete Internet
access setup.
3If you already have an
account at
myZyXEL.com, select
Existing
myZyXEL.com
account and enter
account information.
Otherwise, select New
myZyXEL.com
account and fill in the
fields below to create a

ENGLISH
8
new account and register your ZyWALL. Click Next.
4Wait for the registration
progress to finish.
5The following screen
displays if the registration
was not successful. Click
Return to go back to the
Device Registration screen
and check your settings.
6Click Close to leave the
wizard screen when the
registration and
activation are done.
"If you want to activate a standard service with your iCard’s PIN number
(license key), use the REGISTRATION Service screen. See the user’s
guide for details.
VIf you cannot access the Internet, check the ZyWALL’s connection to the
Ethernet jack with Internet access. Make sure the Internet gateway device
(such as a DSL modem) is working properly. Click WAN in the navigation
panel to verify your settings.

ENGLISH
9
5 Firewall
You can use the ZyWALL without configuring the firewall.
The ZyWALL’s firewall is pre-configured to protect your LAN from attacks from the Internet.
By default, no traffic can enter your LAN unless a request was generated on the LAN first.
6 VPN Rule Setup
A VPN (Virtual
Private Network)
tunnel gives you
a secure
connection to
another computer
or network.
A gateway policy
identifies the
IPSec routers at
either end of a
VPN tunnel.
A network policy specifies which devices (behind the IPSec routers) can use the VPN
tunnel.
This figure helps explain the main fields in the wizard screens.
1Click the wizard icon in the HOME screen and then the VPN Setup link to open the VPN
wizard.