ZyXEL Communications ZyWALL 110 Series User manual

Quick Start Guide
www.zyxel.com
ZyWALL/USG Series
ZyWALL 110 / 310 / 1100
USG40 / USG40W / USG60 / USG60W / USG110 / USG210 /
USG310 / USG1100 / USG1900
Security Firewalls
Version 4.13 ~ 4.15
Edition 1, 3/2016
Copyright © 2016 ZyXEL Communications Corporation
Tutorial Handbook
Default Login Details
LAN Port IP Address https://192.168.1.1
User Name admin
Password 1234

ZyWALL/USG Series Handbook
2
This handbook is a series of tutorials that guides you through various applications of the ZyWALL/
USG. The purpose of the handbook is to show you how to proceed through an application rather
than explain the meaning of GUI features. For the latter, see the Related Information section.
Note: IP addresses, port numbers, and object names are just examples used in these
tutorials, so you must replace them with the corresponding information from your
own network environment when implementing a tutorial.
Bold text indicates the name of a GUI menu, field or field choice.
The handbook is for a series of products. Not all products support all firmware features.
Screenshots and graphics in this handbook may differ slightly from your product due to differences
in your product firmware or your computer operating system. Every effort has been made to ensure
that the information in this handbook is accurate at the time of writing.
Related Information
•QuickStartGuide
The Quick Start Guide shows how to connect the ZyWALL/USG and access the Web Configurator
wizards. (See the wizard real time help for information on configuring each screen.) It also
contains a connection diagram and package contents list.
•User’sGuide
The User’s Guide introduces the ZyWALL/USG series, describes the hardware and explains how to
use the Web Configurator to configure the ZyWALL/USG.
• Web Configurator Online Help
The web help is a question mark icon at the top of the GUI that you click for help in configuring a
web configurator screen with related supplementary information.
• CLI Reference Guide
The CLI Reference Guide explains how to use the Command-Line Interface (CLI) to configure the
ZyWALL/USG.
Note: It is recommended you use the Web Configurator to configure the ZyWALL/USG.
•MoreInformation
Go to support.zyxel.com to find other information on the ZyWALL/USG.

ZyWALL/USG Series User’s Guide
3
Chapter 1
Set Up Your Network ..........................................................................................................................10
1.1 How to Get Started Using the Wizards ..............................................................................................10
1.1.1 Set Up the Internet Access (Ethernet) Wizard on the ZyWALL/USG .....................................10
1.1.2 Set Up the Internet Access (PPPoE) Wizard on the ZyWALL/USG ........................................13
1.1.3 Set Up the Internet Access (PPTP) Wizard on the ZyWALL/USG ..........................................16
1.1.4 Set Up the Wireless Settings Wizard on the ZyWALL/USG ....................................................20
1.1.5 Set Up the Device Registration on the ZyWALL/USG .............................................................21
1.2 How to Configure the 3G/LTE Interface on the ZyWALL/USG as a WAN Backup ............................22
1.2.1 Set Up the 3G/LTE Interface on the ZyWALL/USG .................................................................23
1.2.2 Set Up the Trunk on the ZyWALL/USG ...................................................................................23
1.2.3 Test the Result .........................................................................................................................24
1.2.4 What Can Go Wrong? .............................................................................................................25
1.3 How to Configure Two Different WAN Interfaces with Different IP Addresses in the Same VLAN ...25
1.3.1 Set Up the Port Grouping on the ZyWALL/USG ......................................................................26
1.3.2 Set Up the VLAN on the ZyWALL/USG ...................................................................................26
1.3.3 Set Up the Routing on the ZyWALL/USG ................................................................................27
1.3.4 Test the Result .........................................................................................................................27
1.3.5 What Can Go Wrong? .............................................................................................................28
1.4 How to Let a Server Use the Same Public IP Address as the WAN Interface Using the Bridge Interface
28
1.4.1 Set Up the Bridge Interface on the ZyWALL/USG ...................................................................29
1.4.2 Test the Result .........................................................................................................................29
1.4.3 What Can Go Wrong? .............................................................................................................30
1.5 How to Allow Public Access to a Server Behind ZyWALL/USG ........................................................30
1.5.1 Set Up the NAT on the ZyWALL/USG .....................................................................................31
1.5.2 Set Up the Security Policy on the ZyWALL/USG .....................................................................31
1.5.3 Test the Result .........................................................................................................................32
1.5.4 What Can Go Wrong? .............................................................................................................32
Chapter 2
Set Up WiFi..........................................................................................................................................34
2.1 How to Set Up a WiFi Network with ZyXEL APs ...............................................................................34
2.1.1 Set Up the AP Management on the ZyWALL/USG .................................................................34
2.1.2 Test the Result .........................................................................................................................36
2.1.3 What Can Go Wrong? .............................................................................................................36
2.2 How to Set Up Guest WiFi Network Accounts .................................................................................37
2.2.1 Set Up the WiFi Guest Account, Address Range and Service Rule on the ZyWALL/USG .....37
2.2.2 Set Up the Web Authentication on the ZyWALL/USG .............................................................38
2.2.3 Set Up the Security Policy on the ZyWALL/USG .....................................................................39
2.2.4 Test the Result .........................................................................................................................39
2.2.5 What Can Go Wrong? ............................................................................................................42
2.3 How to Set Up WiFi Networks with Microsoft Active Directory Authentication ..................................42

ZyWALL/USG Series User’s Guide
4
2.3.1 Set Up the Wi-Fi Guest Account and Authentication Method on the ZyWALL/USG ...............43
2.3.2 Set Up the Active Directory Server Account on the ZyWALL/USG .........................................43
2.3.3 Set Up the Security Policy on the ZyWALL/USG .....................................................................44
2.3.4 Test the Result .........................................................................................................................45
2.3.5 What Can Go Wrong? ............................................................................................................47
Chapter 3
Protect Your Network with UTM ........................................................................................................48
3.1 How To Register Your Device and Services at myZyXEL.com .........................................................48
3.1.1 Account Creation .....................................................................................................................48
3.1.2 Device Registration .................................................................................................................50
3.1.3 Service Registration (In the Case of Standard License) ..........................................................51
3.1.4 Device Management (In the Case of Registering Bundled Licenses) .....................................51
3.1.5 Refresh Service .......................................................................................................................52
3.1.6 What Can Go Wrong? .............................................................................................................52
3.2 How To Schedule YouTube Access ..................................................................................................53
3.2.1 Set Up the Schedule on the ZyWALL/USG .............................................................................53
3.2.2 Create the Application Objects on the ZyWALL/USG ..............................................................54
3.2.3 Set Up the Application Patrol Profile on the ZyWALL/USG .....................................................54
3.2.4 Set Up SSL Inspection on the ZyWALL/USG ..........................................................................55
3.2.5 Set Up the Security Policy on the ZyWALL/USG .....................................................................55
3.2.6 Export Certificate from ZyWALL/USG and Import it to Windows 7 Operation System ............56
3.2.7 Test the Result .........................................................................................................................59
3.2.8 What Can Go Wrong? .............................................................................................................59
3.3 How To Exempt Specific Users From Security Control .....................................................................59
3.3.1 Set Up the Security Policy on the ZyWALL/USG for Employees .............................................60
3.3.2 Set Up the Security Policy on the ZyWALL/USG for Executives .............................................61
3.3.3 Test the Result .........................................................................................................................62
3.3.4 What Can Go Wrong? .............................................................................................................63
3.4 How To Detect and Prevent TCP Port Scanning with ADP ..............................................................63
3.4.1 Set Up the ADP Profile on the ZyWALL/USG ..........................................................................64
3.4.2 Test the Result .........................................................................................................................66
3.4.3 What Can Go Wrong? .............................................................................................................67
3.5 How To Block Facebook ....................................................................................................................67
3.5.1 Set Up the Content Filter on the ZyWALL/USG .......................................................................68
3.5.2 Set Up the SSL Inspection on the ZyWALL/USG ....................................................................69
3.5.3 Set Up the Security Policy on the ZyWALL/USG .....................................................................69
3.5.4 Export Certificate from ZyWALL/USG and Import it to Windows 7 Operation System ............70
3.5.5 Test the Result .........................................................................................................................72
3.5.6 What Can Go Wrong? .............................................................................................................73
3.6 How To Exempt Specific Users From a Blocked Website .................................................................73
3.6.1 Set Up the Security Policy on the ZyWALL/USG for Employees .............................................74
3.6.2 Set Up the Security Policy on the ZyWALL/USG for Executives .............................................75

ZyWALL/USG Series User’s Guide
5
3.6.3 Test the Result .........................................................................................................................77
3.6.4 What Can Go Wrong? .............................................................................................................77
3.7 How To Control Access To Google Drive ..........................................................................................78
3.7.1 Set Up the Application Patrol on the ZyWALL/USG ................................................................78
3.7.2 Set Up the SSL Inspection on the ZyWALL/USG ....................................................................79
3.7.3 Set Up the Security Policy on the ZyWALL/USG .....................................................................80
3.7.4 Export Certificate from ZyWALL/USG and Import it to Windows 7 Operation System ............80
3.7.5 Test the Result .........................................................................................................................83
3.7.6 What Can Go Wrong? .............................................................................................................83
3.8 How To Block HTTPS Websites Using Content Filtering and SSL Inspection ..................................84
3.8.1 Set Up the Content Filter on the ZyWALL/USG .......................................................................84
3.8.2 Set Up SSL Inspection on the ZyWALL/USG ..........................................................................85
3.8.3 Set Up the Security Policy on the ZyWALL/USG .....................................................................86
3.8.4 Export Certificate from ZyWALL/USG and Import it to Windows 7 Operation System ............86
3.8.5 Test the Result .........................................................................................................................89
3.8.6 What Can Go Wrong? .............................................................................................................89
3.9 How To Block the Spotify Music Streaming Service ..........................................................................90
3.9.1 Set Up IDP Profile on the ZyWALL/USG .................................................................................90
3.9.2 Test the Result .........................................................................................................................91
3.9.3 What Can Go Wrong? .............................................................................................................92
3.10 How To Test the EICAR Anti-Virus Test File ....................................................................................92
3.10.1 Set Up the Anti-Virus Profile on the ZyWALL/USG ...............................................................93
3.10.2 Set Up the Security Policy on the ZyWALL/USG ...................................................................93
3.10.3 Test the Result .......................................................................................................................94
3.10.4 What Can Go Wrong? ...........................................................................................................94
3.11 How To Block Downloading of DOC, PDF, XLS and ZIP Files ........................................................94
3.11.1 Set Up the Anti-Virus Profile on the ZyWALL/USG ................................................................95
3.11.2 Set Up the Security Policy on the ZyWALL/USG ...................................................................96
3.11.3 Test the Result .......................................................................................................................97
3.11.4 What Can Go Wrong? ............................................................................................................97
3.12 How To Configure an Anti-Spam Policy with Mail Scan and DNSBL ..............................................98
3.12.1 Set Up the Anti-Spam Profile on the ZyWALL/USG ..............................................................98
3.12.2 Set Up the Security Policy on the ZyWALL/USG .................................................................100
3.12.3 Test the Result .....................................................................................................................101
3.12.4 What Can Go Wrong? .........................................................................................................102
Chapter 4
Create Site-to-Site VPN Tunnels......................................................................................................104
4.1 How to Configure Site-to-site IPSec VPN Where the Peer has a Static IP Address .......................104
4.1.1 Set Up the ZyWALL/USG IPSec VPN Tunnel of Corporate Network (HQ) ...........................104
4.1.2 Set Up the ZyWALL/USG IPSec VPN Tunnel of Corporate Network (Branch) .....................107
4.1.3 Test the IPSec VPN Tunnel ...................................................................................................109
4.1.4 What Can Go Wrong? ...........................................................................................................110

ZyWALL/USG Series User’s Guide
6
4.2 How to Configure Site-to-site IPSec VPN Where the Peer has a Dynamic IP Address ..................110
4.2.1 Set Up the ZyWALL/USG IPSec VPN Tunnel of Corporate Network (HQ) ........................... 111
4.2.2 Set Up the ZyWALL/USG IPSec VPN Tunnel of Corporate Network (Branch has a Dynamic IP
Address) ...................................................................................................................................113
4.2.3 Test the IPSec VPN Tunnel ...................................................................................................115
4.2.4 What Can Go Wrong? ...........................................................................................................116
4.3 How to Configure Site-to-site IPSec VPN with FortiGate ................................................................117
4.3.1 Set Up the IPSec VPN Tunnel on the ZyWALL/USG ............................................................117
4.3.2 Set Up the IPSec VPN Tunnel on the FortiGate ....................................................................120
4.3.3 Test the IPSec VPN Tunnel ...................................................................................................123
4.3.4 What Can Go Wrong? ...........................................................................................................124
4.4 How to Configure Site-to-site IPSec VPN with Cisco ......................................................................125
4.4.1 Set Up the IPSec VPN Tunnel on the ZyWALL/USG ............................................................125
4.4.2 Set Up the IPSec VPN Tunnel on the Cisco ..........................................................................130
4.4.3 Test the IPSec VPN Tunnel ..................................................................................................132
4.4.4 What Can Go Wrong? ...........................................................................................................133
4.5 How to Configure Site-to-site IPSec VPN with WatchGuard ...........................................................134
4.5.1 Set Up the IPSec VPN Tunnel on the ZyWALL/USG ............................................................134
4.5.2 Set Up the IPSec VPN Tunnel on the WatchGuard ...............................................................137
4.5.3 Test the IPSec VPN Tunnel ...................................................................................................140
4.5.4 What Can Go Wrong? ...........................................................................................................141
4.6 How to Configure Site-to-site IPSec VPN with a SonicWALL router ...............................................142
4.6.1 Set Up the IPSec VPN Tunnel on the ZyWALL/USG ............................................................142
4.6.2 Set Up the IPSec VPN Tunnel on the SonicWALL ................................................................147
4.6.3 Test the IPSec VPN Tunnel ..................................................................................................149
4.6.4 What Can Go Wrong? ...........................................................................................................150
4.7 How to Configure Site-to-site IPSec VPN with Microsoft (MS) Azure .............................................151
4.7.1 Set Up the IPSec VPN Tunnel on the MS Azure ...................................................................152
4.7.2 Set Up the IPSec VPN Tunnel on the ZyWALL/USG ............................................................158
4.7.3 Test the IPSec VPN Tunnel ...................................................................................................161
4.7.4 What Can Go Wrong? ...........................................................................................................162
4.8 How to Set Up Hub-and-Spoke IPSec VPN ....................................................................................163
4.8.1 Set Up the IPSec VPN Tunnel on the ZyWALL/USG by Using VPN Concentrator ...............164
4.8.2 Hub_HQ-to-Branch_A ...........................................................................................................164
4.8.3 Hub_HQ-to-Branch_B ...........................................................................................................166
4.8.4 Hub_HQ Concentrator ...........................................................................................................168
4.8.5 Spoke_Branch_A ...................................................................................................................168
4.8.6 Spoke_Branch_B ...................................................................................................................171
4.8.7 Test the IPSec VPN Tunnel ...................................................................................................174
4.8.8 What Can Go Wrong? ...........................................................................................................176
4.8.9 Set Up the IPSec VPN Tunnel of ZyWALL/USG without Using VPN Concentrator ...............177
4.8.10 Hub_HQ-to-Branch_A .........................................................................................................177
4.8.11 Hub_HQ-to-Branch_B ..........................................................................................................178

ZyWALL/USG Series User’s Guide
7
4.8.12 Spoke_Branch_A .................................................................................................................180
4.8.13 Spoke_Branch_B .................................................................................................................182
4.8.14 Test the IPSec VPN Tunnel .................................................................................................184
4.8.15 What Can Go Wrong? .........................................................................................................186
4.9 How to Use Dual-WAN to Perform Fail-Over on VPN Using the VPN Concentrator ......................187
4.9.1 Set Up the IPSec VPN Tunnel on the ZyWALL/USG ............................................................187
4.9.2 Hub_HQ-to-Branch_A ...........................................................................................................187
4.9.3 Hub_HQ-to-Branch_B ...........................................................................................................189
4.9.4 Hub_HQ Concentrator ...........................................................................................................191
4.9.5 Spoke_Branch_A ...................................................................................................................192
4.9.6 Spoke_Branch_B ...................................................................................................................194
4.9.7 Test the IPSec VPN Tunnel ...................................................................................................197
4.9.8 What Can Go Wrong? ...........................................................................................................199
Chapter 5
Create Client-to-Site VPN Tunnels ..................................................................................................200
5.1 How to Configure IPSec VPN with ZyWALL IPSec VPN Client ......................................................200
5.1.1 Set Up the ZyWALL/USG IPSec VPN Tunnel .......................................................................200
5.1.2 Set Up the ZyWALL IPSec VPN Client ..................................................................................203
5.1.3 Test the IPSec VPN Tunnel ...................................................................................................205
5.1.4 What Can Go Wrong? ...........................................................................................................206
5.2 How to Configure L2TP VPN with Android 5.0 Mobile Devices ......................................................207
5.2.1 Set Up the L2TP VPN Tunnel on the ZyWALL/USG .............................................................208
5.2.2 Set Up the L2TP VPN Tunnel on the Android Device ...........................................................211
5.2.3 Test the L2TP VPN Tunnel ....................................................................................................213
5.2.4 What Can Go Wrong? ...........................................................................................................214
5.3 How to Configure L2TP VPN with iOS 8.4 Mobile Devices .............................................................215
5.3.1 Set Up the L2TP VPN Tunnel on the ZyWALL/USG .............................................................215
5.3.2 Set Up the L2TP VPN Tunnel on the iOS Device ..................................................................218
5.3.3 Test the L2TP VPN Tunnel ....................................................................................................219
5.3.4 What Can Go Wrong? ...........................................................................................................221
5.4 How to Import ZyWALL/USG Certificate for L2TP over IPsec in Windows 10 ................................221
5.4.1 Set Up the L2TP VPN Tunnel on the ZyWALL/USG .............................................................222
5.4.2 Export a Certificate from ZyWALL/USG and Import it to Windows 10 Operating System .....225
5.4.3 Set Up the L2TP VPN Tunnel on the Windows 10 ................................................................228
5.4.4 Test the L2TP over IPSec VPN Tunnel ..................................................................................230
5.4.5 What Can Go Wrong? ...........................................................................................................231
5.5 How to Configure the L2TP VPN with Apple MAC OS X 10.11 Operating System .........................232
5.5.1 Set Up the L2TP VPN Tunnel on the ZyWALL/USG .............................................................233
5.5.2 Set Up the L2TP VPN Tunnel on the Apple MAC OS X 10.11 El Capitan Operating System 236
5.5.3 Test the L2TP VPN Tunnel ....................................................................................................238
5.5.4 What Can Go Wrong? ...........................................................................................................239
5.6 How to Deploy SSL VPN with Apple Mac OS X 10.10 Operating System ......................................240

ZyWALL/USG Series User’s Guide
8
5.6.1 Set Up the SSL VPN Tunnel on the ZyWALL/USG ...............................................................240
5.6.2 Set Up the SSL VPN Tunnel on the Apple MAC OS X 10.10 Operating System ..................243
5.6.3 Test the SSL VPN Tunnel ......................................................................................................246
5.6.4 What Can Go Wrong? ...........................................................................................................248
5.7 How to Deploy SSL VPN with Windows 10 Operating System .......................................................249
5.7.1 Set Up the SSL VPN Tunnel on the ZyWALL/USG ..............................................................249
5.7.2 Set Up the SSL VPN Tunnel on the Windows 10 Operating System ....................................252
5.7.3 Test the SSL VPN Tunnel ......................................................................................................254
5.7.4 What Can Go Wrong? ..........................................................................................................255
5.8 How To Configure SSL VPN for Remote Access Mobile Devices ...................................................255
5.8.1 Set Up the SSL VPN Tunnel on the ZyWALL/USG ...............................................................256
5.8.2 Test the SSL VPN Tunnel ......................................................................................................257
5.8.3 What Can Go Wrong? ...........................................................................................................260
Chapter 6
Configure IPv6 ..................................................................................................................................262
6.1 How to Set Up IPv6 Interfaces for Pure IPv6 Routing .....................................................................262
6.1.1 Enable the IPv6 on the ZyWALL/USG ...................................................................................262
6.1.2 Set Up the WAN IPv6 Interface on the ZyWALL/USG ...........................................................262
6.1.3 Set Up the LAN IPv6 Interface on the ZyWALL/USG ............................................................263
6.1.4 Test the Result .......................................................................................................................264
6.1.5 What Can Go Wrong? ...........................................................................................................265
6.2 How to Set Up an IPv6 6to4 Tunnel ................................................................................................265
6.2.1 Set Up the LAN IPv6 Interface on the ZyWALL/USG ............................................................266
6.2.2 Set Up the 6to4 Tunnel on the ZyWALL/USG .......................................................................267
6.2.3 Test the Result .......................................................................................................................267
6.2.4 What Can Go Wrong? ...........................................................................................................268
6.3 How to Set Up an IPv6-in-IPv4 Tunnel ...........................................................................................268
6.3.1 Set Up the LAN IPv6 Interface on the ZyWALL/USG ............................................................269
6.3.2 Set Up the 6to4 Tunnel on the ZyWALL/USG .......................................................................270
6.3.3 Set Up the Policy Route on the ZyWALL/USG ......................................................................270
6.3.4 Test the Result .......................................................................................................................271
6.3.5 What Can Go Wrong? ...........................................................................................................272
Chapter 7
Manage Your Network Traffic...........................................................................................................274
7.1 How to Configure Bandwidth Management for FTP and HTTP Traffic ...........................................274
7.1.1 Set Up the Bandwidth Management for FTP on the ZyWALL/USG ......................................274
7.1.2 Set Up the Bandwidth Management for HTTP on the ZyWALL/USG ....................................275
7.1.3 Set Up the Bandwidth Management Global Setting on the ZyWALL/USG ............................276
7.1.4 Test the Result .......................................................................................................................276
7.1.5 What Can Go Wrong? ...........................................................................................................277
7.2 How to Limit BitTorrent or Other Peer-to-Peer Traffic .....................................................................277

ZyWALL/USG Series User’s Guide
9
7.2.1 Set Up the Application Patrol Profile on the ZyWALL/USG ...................................................278
7.2.2 Set Up the Bandwidth Management for BitTorrent on the ZyWALL/USG ..............................279
7.2.3 Set Up the Bandwidth Management Global Setting on the ZyWALL/USG ............................279
7.2.4 Test the Result .......................................................................................................................280
7.2.5 What Can Go Wrong? ...........................................................................................................280
7.3 How to Configure a Trunk for WAN Load Balancing with a Static or Dynamic IP Address .............281
7.3.1 Set Up the Available Bandwidth on WAN1 Interfaces on the ZyWALL/USG .........................281
7.3.2 Set Up the Available Bandwidth on WAN2 Interfaces on the ZyWALL/USG .........................282
7.3.3 Set Up the WAN Trunk on the ZyWALL/USG ........................................................................283
7.3.4 Test the Result .......................................................................................................................284
7.3.5 What Can Go Wrong? ...........................................................................................................284
7.4 How to Configure DNS Inbound Load Balancing to balance DNS Queries Among Interfaces .......284
7.4.1 Set Up the NAT Rule on the ZyWALL/USG ...........................................................................286
7.4.2 Test the Result .......................................................................................................................287
7.4.3 What Can Go Wrong? ...........................................................................................................287
7.5 How to Manage Voice Traffic ..........................................................................................................287
7.5.1 Set Up the SIP ALG on the ZyWALL/USG ............................................................................288
7.5.2 Set Up the Bandwidth Management for SIP on the ZyWALL/USG .......................................288
7.5.3 Set Up the Bandwidth Management for P2P on the ZyWALL/USG ......................................289
7.5.4 Set Up the Bandwidth Management for FTP on the ZyWALL/USG ......................................290
7.5.5 Test the Result .......................................................................................................................290
7.5.6 What Can Go Wrong? ...........................................................................................................291
Chapter 8
Maintain Your Device........................................................................................................................292
8.1 How to Manage ZyWALL/USG Configuration Files ........................................................................292
8.1.1 Rename the Configuration Files from the ZyWALL/USG ......................................................292
8.1.2 Download the Configuration Files on the ZyWALL/USG .......................................................293
8.1.3 Copy the Configuration Files on the ZyWALL/USG ...............................................................293
8.1.4 Apply the Configuration Files on the ZyWALL/USG ..............................................................294
8.1.5 Upload the Configuration Files from the ZyWALL/USG .........................................................295
8.1.6 What Can Go Wrong? ...........................................................................................................295
8.2 How to Manage ZyWALL/USG Firmware .......................................................................................296
8.2.1 Download the Current Firmware Version from ZyXEL.com ...................................................296
8.2.2 Upload the Configuration Files on the ZyWALL/USG ............................................................296
8.2.3 What Can Go Wrong? ...........................................................................................................297

ZyWALL/USG Series User’s Guide
10
CHAPTER 1
Set Up Your Network
1.1 How to Get Started Using the Wizards
When you log into the Web Configurator for the first time or when you reset the ZyWALL/USG to its
default configuration, the Installation Setup Wizard screen displays. This is an example of using
ZyWALL/USG Wizards to configure Internet connection settings, wireless settings and device
registration services.
Figure 1 ZyWALL/USG with Installation Setup Wizard Example
Note: You need Internet access to activate your ZyWALL/USG subscription services. This
example was tested using USG310 (Firmware Version: ZLD 4.13).
1.1.1 Set Up the Internet Access (Ethernet) Wizard on the ZyWALL/USG
1In the ZyWALL/USG Installation Setup Wizard Welcome page, click Next to start configuring.
Click the double arrow in the upper right corner to display () or hide () the help.

Chapter 1 Set Up Your Network
ZyWALL/USG Series User’s Guide
11
Figure 2 Installation Setup Wizard > Welcome
2In the Internet Access page, you can configure Internet connections from two Internet service
providers (ISPs). Connect your ISP devices to your ZyWALL/USG WAN port, select I have two
ISPs if you want to configure two Internet connections or leave it cleared to configure just one.
Choose the Encapsulation option to be Ethernet, leave Zone as default setting Internet
connection belongs to the WAN zone.
In the IP Address Assignment section, select Auto if your ISP did not assign you a fixed IP
address or select Static if your ISP did assign you a fixed IP address. Click Next.

Chapter 1 Set Up Your Network
ZyWALL/USG Series User’s Guide
12
Figure 3 Installation Setup Wizard > Welcome > Internet Access
3Enter the IP Address, IP Subnet Mask and Gateway IP Address exactly as given by your ISP
or network administrator. First/Second DNS Servers are optional. Click Next.
Figure 4 Installation Setup Wizard > Welcome > Internet Access

Chapter 1 Set Up Your Network
ZyWALL/USG Series User’s Guide
13
4The Internet Access Succeed page will display the summary of Internet access of the First
Setting. If you select I have two ISPs in Internet Access > ISP Setting, click Next to
configure the second WAN interface or continue to the Wireless Settings page.
Figure 5 Installation Setup Wizard > Welcome > Internet Access > Internet Access Succeed
1.1.2 Set Up the Internet Access (PPPoE) Wizard on the ZyWALL/USG
1In the ZyWALL/USG Installation Setup Wizard Welcome page, click Next to start configuring for
Internet. Click the double arrow in the upper right corner to display () or hide () the help.

Chapter 1 Set Up Your Network
ZyWALL/USG Series User’s Guide
14
Figure 6 Installation Setup Wizard > Welcome
2In the Internet Access page, you can configure Internet connections from two Internet service
providers (ISPs). Connect your ISP devices to your ZyWALL/USG WAN port, select I have two
ISPs if you want to configure two Internet connections or leave it cleared to configure just one.
Choose the Encapsulation option to be PPP over Ethernet, leave Zone as default setting
Internet connection belongs to the WAN zone. Leave the IP Address Assignment section to be
the Auto and click Next.

Chapter 1 Set Up Your Network
ZyWALL/USG Series User’s Guide
15
Figure 7 Installation Setup Wizard > Welcome > Internet Access
3Select the Authentication Type to be the authentication method by the remote node. Enter the
User Name and Password exactly as given by your ISP or network administrator. Select Nailed-
UP if you want to keep the connection always up or type the desired Idle Timeout value in
seconds. Click Next.
Figure 8 Installation Setup Wizard > Welcome > Internet Access

Chapter 1 Set Up Your Network
ZyWALL/USG Series User’s Guide
16
4The Internet Access Succeed page will display the summary of Internet access of the First
Setting. If you select I have two ISPs in Internet Access > ISP Setting, click Next to
configure the second WAN interface.
Figure 9 Installation Setup Wizard > Welcome > Internet Access > Internet Access Succeed
1.1.3 Set Up the Internet Access (PPTP) Wizard on the ZyWALL/USG
1In the ZyWALL/USG Installation Setup Wizard Welcome page, click Next to start configuring for
Internet. Click the double arrow in the upper right corner to display () or hide () the help.

Chapter 1 Set Up Your Network
ZyWALL/USG Series User’s Guide
17
Figure 10 Installation Setup Wizard > Welcome
2In the Internet Access page, you can configure Internet connections from two Internet service
providers (ISPs). Connect your ISP devices to your ZyWALL/USG WAN port, select I have two
ISPs if you want to configure two Internet connections or leave it cleared to configure just one.
Choose the Encapsulation option to be the PPTP, leave Zone as default setting Internet
connection belongs to the WAN zone. Leave the IP Address Assignment section to be the Auto
and click Next.

Chapter 1 Set Up Your Network
ZyWALL/USG Series User’s Guide
18
Figure 11 Installation Setup Wizard > Welcome > Internet Access
3Select the Authentication Type to be the authentication method by the remote node. Enter the
User Name and Password exactly as given by your ISP or network administrator. Select Nailed-
UP if you want to keep the connection always up or type the desired Idle Timeout value in
seconds. Click Next.
Enter the Base IP Address, IP Subnet Mask, Gateway IP Address assigned to you by your ISP.
Type the Server IP address of the PPTP Server. Click Next.

Chapter 1 Set Up Your Network
ZyWALL/USG Series User’s Guide
19
Figure 12 Installation Setup Wizard > Welcome > Internet Access
4The Internet Access Succeed page will display the summary of Internet access of the First
Setting. If you select I have two ISPs in Internet Access > ISP Setting, click Next to
configure the second WAN interface.
Figure 13 Installation Setup Wizard > Welcome > Internet Access > Internet Access Succeed

Chapter 1 Set Up Your Network
ZyWALL/USG Series User’s Guide
20
1.1.4 Set Up the Wireless Settings Wizard on the ZyWALL/USG
1In the Wireless Settings page, select Yes if you want the ZyWALL/USG to enable AP Controller
feature in your network; select No if you want to skip this setting. Click Next.
Figure 14 Installation Setup Wizard > Welcome > Internet Access > Internet Access Succeed >
Wireless Settings
2Configure descriptive SSID name (1-32 characters) for the wireless LAN. Select Pre-Shared Key
(8-63 characters) to add security on this wireless network. Otherwise, select None to allow any
wireless client to associate this network without authentication.
Select Hidden SSID to hide the SSID from site tool scanning.
Select Enable Intra-BSS Traffic blocking if you want to prevent crossover traffic from within the
same wireless network. Wireless clients in that network can still access the wired network but
cannot communicate with each other.
For Built-in Wireless AP only, ZyWALL/USGs with Win the model name have a built-in AP. Select
an interface to bridge with the built-in AP wireless network. Devices connected to this interface will
then be in the same broadcast domain as devices in the AP wireless network.