ZyXEL Communications 5 Series User manual

www.zyxel.com
ZyWALL 5/35/70 Series
Internet Security Appliance
User’s Guide
Version 4.04
03/2008
Edition 1
DEFAULT LOGIN
IP Address http://192.168.1.1
Password 1234

About This User's Guide
ZyWALL 5/35/70 Series User’s Guide 3
About This User's Guide
Intended Audience
This manual is intended for people who want to configure the ZyWALL using the web
configurator or System Management Terminal (SMT). You should have at least a basic
knowledge of TCP/IP networking concepts and topology.
Related Documentation
• Quick Start Guide
The Quick Start Guide is designed to help you get up and running right away. It contains
information on setting up your network and configuring for Internet access.
• Web Configurator Online Help
Embedded web help for descriptions of individual screens and supplementary
information.
• CLI Reference Guide
The CLI Reference Guide explains how to use the Command-Line Interface (CLI) to
configure the ZyWALL.
• Supporting Disk
Refer to the included CD for support documents.
• ZyXEL Web Site
Please refer to www.zyxel.com for additional support documentation and product
certifications.
User Guide Feedback
Help us help you. Send all User Guide-related comments, questions or suggestions for
improvement to the following address, or use e-mail instead. Thank you!
The Technical Writing Team,
ZyXEL Communications Corp.,
6 Innovation Road II,
Science-Based Industrial Park,
Hsinchu, 300, Taiwan.
E-mail: [email protected]

Document Conventions
ZyWALL 5/35/70 Series User’s Guide
4
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
1Warnings tell you about things that could harm you or your device.
"Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The ZyWALL 5/35/70 series may be referred to as the “ZyWALL”, the “device” or the
“system” in this User’s Guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example, [ENTER]
means the “enter” or “return” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the [ENTER] key.
“Select” or “choose” means for you to use one of the predefined choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example,
Maintenance > Log > Log Setting means you first click Maintenance in the navigation
panel, then the Log sub menu and finally the Log Setting tab to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value. For
example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000”
or “1048576” and so on.
• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”.

Document Conventions
ZyWALL 5/35/70 Series User’s Guide 5
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The ZyWALL icon is not an
exact representation of your device.
ZyWALL Computer Notebook computer
Server Firewall Telephone
Switch Router

Safety Warnings
ZyWALL 5/35/70 Series User’s Guide
6
Safety Warnings
1For your safety, be sure to read and follow all warning notices and instructions.
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.
• Connect ONLY suitable accessories to the device.
• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel should
service or disassemble this device. Please contact your vendor for further information.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device.
• Connect the power adaptor or cord to the right supply voltage (for example, 110V AC in
North America or 230V AC in Europe).
• Do NOT remove the plug and connect it to a power outlet by itself; always attach the plug
to the power adaptor first before connecting it to a power outlet.
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.
• If the power adaptor or cord is damaged, remove it from the power outlet.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.
• Do not use the device outside, and make sure all the connections are indoors. There is a
remote risk of electric shock from lightning.
• CAUTION: RISK OF EXPLOSION IF BATTERY (on the motherboard) IS REPLACED
BY AN INCORRECT TYPE. DISPOSE OF USED BATTERIES ACCORDING TO
THE INSTRUCTIONS. Dispose them at the applicable collection point for the recycling
of electrical and electronic equipment. For detailed information about recycling of this
product, please contact your local city office, your household waste disposal service or the
store where you purchased the product.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.
• Fuse Warning! Replace a fuse only with a fuse of the same type and rating.

Safety Warnings
ZyWALL 5/35/70 Series User’s Guide 7
This product is recyclable. Dispose of it properly.

Safety Warnings
ZyWALL 5/35/70 Series User’s Guide
8

Contents Overview
ZyWALL 5/35/70 Series User’s Guide 9
Contents Overview
Introduction ............................................................................................................................49
Getting to Know Your ZyWALL .................................................................................................. 51
Hardware Installation ................................................................................................................. 55
Introducing the Web Configurator .............................................................................................. 61
Wizard Setup ............................................................................................................................. 87
Tutorials ................................................................................................................................... 109
Registration Screens ............................................................................................................... 141
Network .................................................................................................................................147
LAN Screens ........................................................................................................................... 149
Bridge Screens ........................................................................................................................ 161
WAN Screens .......................................................................................................................... 169
DMZ Screens ........................................................................................................................... 207
WLAN Screens ........................................................................................................................219
Wireless Screens ..................................................................................................................... 229
Security .................................................................................................................................249
Firewall Screens ...................................................................................................................... 251
Intrusion Detection and Prevention (IDP) Screens ................................................................. 277
Anti-Virus Screens ................................................................................................................... 299
Anti-Spam Screens .................................................................................................................. 313
Content Filtering Screens ........................................................................................................327
Content Filtering Reports .........................................................................................................349
IPSec VPN ............................................................................................................................... 357
Certificates ............................................................................................................................... 399
Authentication Server Screens ................................................................................................ 427
Advanced ..............................................................................................................................433
Network Address Translation (NAT) ........................................................................................ 435
Static Route Screens ............................................................................................................... 451
Policy Route Screens .............................................................................................................. 457
Bandwidth Management Screens ............................................................................................ 465
DNS Screens ........................................................................................................................... 479
Remote Management Screens ................................................................................................491
UPnP Screens .........................................................................................................................519
Custom Application Screen ..................................................................................................... 529
ALG Screen ............................................................................................................................. 531

Contents Overview
ZyWALL 5/35/70 Series User’s Guide
10
Reports, Logs and Maintenance .........................................................................................537
Reports Screens ...................................................................................................................... 539
Logs Screens .......................................................................................................................... 555
Maintenance Screens ..............................................................................................................585
SMT .......................................................................................................................................603
Introducing the SMT ................................................................................................................ 605
SMT Menu 1 - General Setup .................................................................................................. 613
WAN and Dial Backup Setup ................................................................................................... 619
LAN Setup ............................................................................................................................... 633
Internet Access ........................................................................................................................ 639
DMZ Setup .............................................................................................................................. 645
Route Setup ............................................................................................................................. 649
Wireless Setup ........................................................................................................................ 653
Remote Node Setup ................................................................................................................ 659
IP Static Route Setup ..............................................................................................................669
Network Address Translation (NAT) ........................................................................................ 673
Introducing the ZyWALL Firewall ............................................................................................. 693
Filter Configuration .................................................................................................................. 695
SNMP Configuration .................................................................................................................711
System Information & Diagnosis ............................................................................................. 713
Firmware and Configuration File Maintenance ........................................................................ 725
System Maintenance Menus 8 to 10 ....................................................................................... 739
Remote Management ..............................................................................................................745
IP Policy Routing ..................................................................................................................... 749
Call Scheduling ........................................................................................................................ 757
Troubleshooting and Product Specifications ...................................................................761
Troubleshooting ....................................................................................................................... 763
Product Specifications ............................................................................................................. 769
Appendices and Index .........................................................................................................779

Table of Contents
ZyWALL 5/35/70 Series User’s Guide 11
Table of Contents
About This User's Guide..........................................................................................................3
Document Conventions............................................................................................................4
Safety Warnings........................................................................................................................6
Contents Overview ...................................................................................................................9
Table of Contents....................................................................................................................11
List of Figures.........................................................................................................................29
List of Tables...........................................................................................................................41
Part I: Introduction................................................................................. 49
Chapter 1
Getting to Know Your ZyWALL..............................................................................................51
1.1 ZyWALL Internet Security Appliance Overview ................................................................... 51
1.2 ZyWALL Features ................................................................................................................ 51
1.3 Applications for the ZyWALL ...............................................................................................52
1.3.1 Secure Broadband Internet Access via Cable or DSL Modem .................................. 52
1.3.2 VPN Application ......................................................................................................... 53
1.3.3 3G WAN Application (ZyWALL 5 Only) ...................................................................... 53
1.4 Ways to Manage the ZyWALL ............................................................................................. 54
1.5 Good Habits for Managing the ZyWALL .............................................................................. 54
Chapter 2
Hardware Installation..............................................................................................................55
2.1 General Installation Instructions ..........................................................................................55
2.2 Desktop Installation ............................................................................................................ 55
2.3 Rack-mounted Installation Requirements ............................................................................ 56
2.4 Rack-Mounted Installation ................................................................................................... 57
2.5 3G Card, WLAN Card and ZyWALL Turbo Card Installation ............................................... 58
2.6 Front Panel Lights ............................................................................................................... 59
Chapter 3
Introducing the Web Configurator ........................................................................................61
3.1 Web Configurator Overview .................................................................................................61

Table of Contents
ZyWALL 5/35/70 Series User’s Guide
12
3.2 Accessing the ZyWALL Web Configurator .......................................................................... 61
3.3 Resetting the ZyWALL ......................................................................................................... 63
3.3.1 Procedure To Use The Reset Button ......................................................................... 63
3.3.2 Uploading a Configuration File Via Console Port ....................................................... 63
3.4 Navigating the ZyWALL Web Configurator .......................................................................... 64
3.4.1 Title Bar ...................................................................................................................... 64
3.4.2 Main Window ..............................................................................................................65
3.4.3 HOME Screen: Router Mode ................................................................................... 65
3.4.4 HOME Screen: Bridge Mode .................................................................................... 71
3.4.5 Navigation Panel ........................................................................................................74
3.4.6 Port Statistics ............................................................................................................ 80
3.4.7 Show Statistics: Line Chart ........................................................................................ 81
3.4.8 DHCP Table ...........................................................................................................82
3.4.9 VPN Status ................................................................................................................. 83
3.4.10 Bandwidth Monitor .................................................................................................. 84
Chapter 4
Wizard Setup...........................................................................................................................87
4.1 Wizard Setup Overview ...................................................................................................... 87
4.2 Internet Access ................................................................................................................... 88
4.2.1 ISP Parameters ..........................................................................................................88
4.2.2 Internet Access Wizard: Second Screen .................................................................... 92
4.2.3 Internet Access Wizard: Registration ......................................................................... 93
4.2.4 Internet Access Wizard: Status .................................................................................. 94
4.2.5 Internet Access Wizard: Service Activation ............................................................... 95
4.3 VPN Wizard Gateway Setting .............................................................................................. 96
4.4 VPN Wizard Network Setting ............................................................................................... 97
4.5 VPN Wizard IKE Tunnel Setting (IKE Phase 1) ................................................................... 99
4.6 VPN Wizard IPSec Setting (IKE Phase 2) ......................................................................... 100
4.7 VPN Wizard Status Summary ............................................................................................ 102
4.8 VPN Wizard Setup Complete ............................................................................................ 104
4.9 Anti-Spam Wizard: Email Server Location Setting ............................................................104
4.10 Anti-Spam Wizard: Direction Recommendations ............................................................. 105
4.11 Anti-Spam Wizard: Direction Configuration ...................................................................... 106
4.12 Anti-Spam Wizard: Setup Complete ................................................................................ 108
Chapter 5
Tutorials.................................................................................................................................109
5.1 Dynamic VPN Rule Configuration .....................................................................................109
5.1.1 Configure Bob’s User Account ..................................................................................110
5.1.2 VPN Gateway and Network Policy Configuration .....................................................110
5.1.3 Configure Zero Configuration Mode on ZyWALL B ...................................................116
5.1.4 Testing Your VPN Configuration ................................................................................117

Table of Contents
ZyWALL 5/35/70 Series User’s Guide 13
5.1.5 Using the Dynamic VPN Rule for More VPN Tunnels ...............................................119
5.2 Security Settings for VPN Traffic ........................................................................................119
5.2.1 IDP for From VPN Traffic Example ..........................................................................120
5.2.2 IDP for To VPN Traffic Example ............................................................................... 121
5.3 Firewall Rule for VPN Example ......................................................................................... 122
5.3.1 Configuring the VPN Rule ........................................................................................ 123
5.3.2 Configuring the Firewall Rules ................................................................................. 127
5.4 How to Set up a 3G WAN Connection ............................................................................... 130
5.4.1 Inserting a 3G Card .................................................................................................. 130
5.4.2 Configuring 3G WAN Settings .................................................................................. 131
5.4.3 Checking WAN Connections .................................................................................... 132
5.5 Configuring Load Balancing ..............................................................................................132
5.6 Configuring Content Filtering .............................................................................................133
5.6.1 Enable Content Filtering ........................................................................................... 133
5.6.2 Block Categories of Web Content ............................................................................ 134
5.6.3 Assign Bob’s Computer a Specific IP Address ......................................................... 136
5.6.4 Create a Content Filter Policy for Bob ...................................................................... 136
5.6.5 Set the Content Filter Schedule ............................................................................... 137
5.6.6 Block Categories of Web Content for Bob ............................................................... 138
Chapter 6
Registration Screens............................................................................................................141
6.1 Overview ............................................................................................................................ 141
6.1.1 What You Can Do in the Registration Screens ........................................................ 141
6.1.2 What You Need to Know About Registration ............................................................ 141
6.2 The Registration Screen ....................................................................................................142
6.3 The Service Screen ........................................................................................................... 144
Part II: Network..................................................................................... 147
Chapter 7
LAN Screens..........................................................................................................................149
7.1 Overview ............................................................................................................................ 149
7.1.1 What You Can Do in The LAN Screens ................................................................... 149
7.1.2 What You Need to Know About LAN ........................................................................150
7.2 The LAN Screen ................................................................................................................152
7.3 The LAN Static DHCP Screen ........................................................................................... 155
7.4 The LAN IP Alias Screen ..................................................................................................156
7.5 The LAN Port Roles Screen .............................................................................................. 158
Chapter 8
Bridge Screens......................................................................................................................161

Table of Contents
ZyWALL 5/35/70 Series User’s Guide
14
8.1 Overview ............................................................................................................................ 161
8.1.1 What You Can Do in the Bridge Screens ................................................................. 161
8.1.2 What You Need To Know About Bridging .................................................................162
8.2 The Bridge Screen ............................................................................................................. 163
8.3 The Bridge Port Roles Screen .......................................................................................... 164
8.4 Bridge Technical Reference ............................................................................................... 166
Chapter 9
WAN Screens.........................................................................................................................169
9.1 Overview ............................................................................................................................ 169
9.1.1 What You Can Do in the WAN Screens ................................................................... 170
9.1.2 What You Need to Know About WAN ...................................................................... 170
9.1.3 Before You Begin ..................................................................................................... 172
9.2 The General Screen ..........................................................................................................172
9.2.1 Configuring the General Screen ............................................................................... 173
9.2.2 Configuring Load Balancing ..................................................................................... 177
9.2.3 Least Load First ....................................................................................................... 177
9.2.4 Weighted Round Robin ............................................................................................179
9.2.5 Spillover ....................................................................................................................180
9.3 The WAN1 and WAN2 Screen .......................................................................................... 182
9.3.1 WAN Ethernet Encapsulation ................................................................................... 183
9.3.2 PPPoE Encapsulation ..............................................................................................186
9.3.3 PPTP Encapsulation ................................................................................................189
9.4 The 3G (WAN2) Screen ..................................................................................................... 192
9.5 The Traffic Redirect Screen ...............................................................................................197
9.6 Configuring the Traffic Redirect Screen ............................................................................. 198
9.7 The Dial Backup Screen .................................................................................................... 199
9.7.1 The Advanced Modem Setup Screen ...................................................................... 201
9.7.2 Configuring the Advanced Modem Setup Screen .................................................... 202
9.8 WAN Technical Reference ................................................................................................. 204
Chapter 10
DMZ Screens.........................................................................................................................207
10.1 Overview ..........................................................................................................................207
10.1.1 What You Can Do in the DMZ Screens .................................................................. 207
10.1.2 What You Need To Know About DMZ .................................................................... 208
10.1.3 DMZ Public IP Address Example ........................................................................... 208
10.1.4 DMZ Private and Public IP Address Example ........................................................ 209
10.2 The DMZ Screen .............................................................................................................210
10.3 The Static DHCP Screen ................................................................................................ 213
10.4 The IP Alias Screen ........................................................................................................ 214
10.5 The DMZ Port Roles Screen .......................................................................................... 216

Table of Contents
ZyWALL 5/35/70 Series User’s Guide 15
Chapter 11
WLAN Screens......................................................................................................................219
11.1 Overview ..........................................................................................................................219
11.1.1 What You Can Do in the WLAN Screens ...............................................................219
11.1.2 What You Need to Know About WLAN ................................................................... 220
11.2 The WLAN Screen ...........................................................................................................220
11.3 WLAN Static DHCP .........................................................................................................223
11.4 WLAN IP Alias ................................................................................................................ 224
11.5 WLAN Port Roles ............................................................................................................. 226
Chapter 12
Wireless Screens..................................................................................................................229
12.1 Overview ..........................................................................................................................229
12.1.1 What You Can Do in the Wireless Screens ............................................................ 229
12.1.2 What You Need to Know ........................................................................................ 229
12.2 Wireless Card .................................................................................................................. 232
12.2.1 Static WEP .............................................................................................................234
12.2.2 WPA-PSK ............................................................................................................... 235
12.2.3 WPA .......................................................................................................................237
12.2.4 IEEE 802.1x + Dynamic WEP ................................................................................ 238
12.2.5 IEEE 802.1x + Static WEP ..................................................................................... 239
12.2.6 IEEE 802.1x + No WEP .........................................................................................240
12.2.7 No Access 802.1x + Static WEP ............................................................................ 241
12.2.8 No Access 802.1x + No WEP ................................................................................ 242
12.3 MAC Filter ....................................................................................................................... 243
12.4 Technical Reference ........................................................................................................244
Part III: Security.................................................................................... 249
Chapter 13
Firewall Screens....................................................................................................................251
13.1 Overview ..........................................................................................................................251
13.1.1 What You Can Do Using the Firewall Screens ....................................................... 252
13.1.2 What You Need To Know About the ZyWALL Firewall ...........................................252
13.1.3 Before You Begin ................................................................................................... 252
13.2 Firewall Rules Example ................................................................................................... 252
13.3 The Firewall Default Rule Screen .................................................................................... 254
13.4 The Firewall Default Rule (Bridge Mode) Screen ............................................................256
13.5 The Firewall Rule Summary Screen ............................................................................... 259
13.5.1 The Firewall Edit Rule Screen ...............................................................................260
13.6 The Anti-Probing Screen ................................................................................................ 263

Table of Contents
ZyWALL 5/35/70 Series User’s Guide
16
13.7 The Firewall Thresholds Screen ..................................................................................... 264
13.8 The Firewall Services Screen ......................................................................................... 266
13.8.1 The Firewall Edit Custom Service Screen ............................................................. 267
13.8.2 My Service Firewall Rule Example ......................................................................... 268
13.9 Technical Reference ........................................................................................................271
Chapter 14
Intrusion Detection and Prevention (IDP) Screens ...........................................................277
14.1 Overview ..........................................................................................................................277
14.1.1 What You Can Do Using the IDP Screens .............................................................277
14.1.2 What You Need To Know About the ZyWALL IDP ................................................. 278
14.1.3 Before You Begin ................................................................................................... 279
14.2 The General Setup Screen .............................................................................................. 279
14.3 The Signatures Screen ....................................................................................................281
14.3.1 Attack Types ...........................................................................................................281
14.3.2 Intrusion Severity ................................................................................................... 282
14.3.3 Signature Actions ................................................................................................... 282
14.3.4 Configuring The IDP Signatures Screen ................................................................ 283
14.3.5 The Query View Screen ........................................................................................ 284
14.4 The Anomaly Screen .......................................................................................................289
14.5 The Update Screen ........................................................................................................291
14.5.1 mySecurityZone ..................................................................................................... 291
14.5.2 Configuring The IDP Update Screen ...................................................................... 292
14.6 The Backup and Restore Screen .................................................................................... 293
14.7 Technical Reference ........................................................................................................294
Chapter 15
Anti-Virus Screens................................................................................................................299
15.1 Overview ..........................................................................................................................299
15.1.1 What You Can Do in the Antivirus Screens ............................................................ 299
15.1.2 What You Need to Know About Antivirus ............................................................... 300
15.2 The General Screen ........................................................................................................301
15.3 The Signature Screen .....................................................................................................303
15.3.1 Signature Search Example .................................................................................... 305
15.4 The Update Screen ........................................................................................................306
15.4.1 mySecurityZone ..................................................................................................... 307
15.4.2 Configuring Anti-virus Update ................................................................................ 307
15.5 The Backup and Restore Screen ................................................................................... 309
15.6 Technical Reference ........................................................................................................310
Chapter 16
Anti-Spam Screens...............................................................................................................313
16.1 Overview ..........................................................................................................................313

Table of Contents
ZyWALL 5/35/70 Series User’s Guide 17
16.1.1 What You Can Do in the Antispam Screens ...........................................................313
16.1.2 What You Need to Know About Antispam .............................................................. 314
16.2 The General Screen ........................................................................................................315
16.3 The External DB Screen ............................................................................................. 318
16.4 The Lists Screen .............................................................................................................. 320
16.5 Anti-Spam Lists Edit Screen .......................................................................................... 322
16.6 Technical Reference ........................................................................................................324
Chapter 17
Content Filtering Screens....................................................................................................327
17.1 Overview ..........................................................................................................................327
17.1.1 What You Can Do in the Content Filtering Screens ...............................................327
17.1.2 What You Need to Know About Content Filtering ..................................................327
17.2 General Screen ............................................................................................................... 328
17.3 The Policy Screen ........................................................................................................ 331
17.4 Content Filter Policy: General ......................................................................................... 332
17.5 Content Filter Policy: External Database ........................................................................ 334
17.6 Content Filter Policy: Customization ............................................................................... 341
17.7 Content Filter Policy: Schedule ......................................................................................342
17.8 Content Filter Object ....................................................................................................... 343
17.9 Content Filtering Cache ..................................................................................................346
Chapter 18
Content Filtering Reports.....................................................................................................349
18.1 Overview ..........................................................................................................................349
18.2 Checking Content Filtering Activation .............................................................................. 349
18.3 Viewing Content Filtering Reports ................................................................................... 349
18.4 Web Site Submission .......................................................................................................354
Chapter 19
IPSec VPN..............................................................................................................................357
19.1 Overview ..........................................................................................................................357
19.1.1 What You Can Do in the IPSec VPN Screens ........................................................ 357
19.1.2 What You Need to Know About IPSec VPN ...........................................................358
19.2 The VPN Rules (IKE) Screen .......................................................................................... 360
19.3 The VPN Rules (IKE) Gateway Policy Edit Screen ......................................................... 361
19.4 The Network Policy Edit Screen ....................................................................................367
19.5 The Network Policy Edit: Port Forwarding Screen .......................................................... 372
19.6 The Network Policy Move Screen ................................................................................... 374
19.7 The VPN Rules (Manual) Screen .................................................................................... 375
19.8 The VPN Rules (Manual): Edit Screen ............................................................................ 376
19.9 The VPN SA Monitor Screen ...........................................................................................379
19.10 The VPN Global Setting Screen .................................................................................... 379

Table of Contents
ZyWALL 5/35/70 Series User’s Guide
18
19.11 Telecommuter VPN/IPSec Examples .............................................................................382
19.11.1 Telecommuters Sharing One VPN Rule Example ................................................ 383
19.11.2 Telecommuters Using Unique VPN Rules Example ............................................. 383
19.12 VPN and Remote Management ..................................................................................... 385
19.13 Hub-and-spoke VPN ......................................................................................................385
19.13.1 Hub-and-spoke VPN Example ............................................................................. 386
19.13.2 Hub-and-spoke Example VPN Rule Addresses ................................................... 387
19.13.3 Hub-and-spoke VPN Requirements and Suggestions ......................................... 387
19.14 IPSec VPN Background Information ............................................................................. 388
Chapter 20
Certificates ............................................................................................................................399
20.1 Overview ..........................................................................................................................399
20.1.1 What You Can Do in the Certificate Screens ......................................................... 399
20.1.2 What You Need to Know About Certificates ........................................................... 399
20.1.3 Verifying a Certificate ............................................................................................. 400
20.2 The My Certificates Screen ............................................................................................. 401
20.2.1 The My Certificate Details Screen .......................................................................... 403
20.3 The My Certificate Export Screen ....................................................................................406
20.4 The My Certificate Import Screen .................................................................................... 407
20.4.1 Using the My Certificate Import Screen ................................................................. 407
20.5 The My Certificate Create Screen ...................................................................................409
20.6 The Trusted CAs Screen ................................................................................................. 413
20.7 The Trusted CA Details Screen .......................................................................................415
20.8 The Trusted CA Import Screen ........................................................................................ 418
20.9 The Trusted Remote Hosts Screen ................................................................................. 419
20.10 The Trusted Remote Hosts Import Screen .................................................................... 421
20.11 The Trusted Remote Host Certificate Details Screen .................................................... 422
20.12 The Directory Servers Screen ....................................................................................... 424
20.13 The Directory Server Add or Edit Screen ......................................................................425
Chapter 21
Authentication Server Screens............................................................................................427
21.1 Overview ..........................................................................................................................427
21.1.1 What You Can Do in the Authentication Server Screens ....................................... 427
21.1.2 What You Need To Know About Authentication Server .......................................... 427
21.2 The Local User Database Screen .................................................................................... 428
21.3 The RADIUS Screen ....................................................................................................... 430
Part IV: Advanced ................................................................................ 433

Table of Contents
ZyWALL 5/35/70 Series User’s Guide 19
Chapter 22
Network Address Translation (NAT)....................................................................................435
22.1 Overview ..........................................................................................................................435
22.1.1 What You Can Do Using the NAT Screens ............................................................435
22.1.2 What You Need To Know About NAT ..................................................................... 435
22.1.3 Before You Begin ................................................................................................... 436
22.2 The NAT Overview Screen .............................................................................................. 436
22.3 The NAT Address Mapping Screen ................................................................................. 438
22.3.1 NAT Address Mapping Edit ................................................................................... 440
22.4 The Port Forwarding Screen ........................................................................................... 441
22.4.1 Default Server IP Address ......................................................................................441
22.4.2 Port Forwarding: Services and Port Numbers ........................................................ 442
22.4.3 Configuring Servers Behind Port Forwarding (Example) ....................................... 442
22.4.4 NAT and Multiple WAN ...........................................................................................442
22.4.5 Port Translation ...................................................................................................... 443
22.4.6 Configuring The Port Forwarding Screen ............................................................... 443
22.5 The Port Triggering Screen ............................................................................................. 445
22.5.1 Configuring Port Triggering .................................................................................... 446
22.6 Technical Reference ........................................................................................................447
Chapter 23
Static Route Screens............................................................................................................451
23.1 Overview ..........................................................................................................................451
23.1.1 What You Can Do in the Static Route Screens ...................................................... 451
23.2 The IP Static Route Screen ............................................................................................. 452
23.2.1 The IP Static Route Edit Screen ............................................................................. 454
Chapter 24
Policy Route Screens...........................................................................................................457
24.1 Overview ..........................................................................................................................457
24.1.1 What You Can Do in the Policy Route Screens ..................................................... 457
24.1.2 What You Need To Know About Policy Route ........................................................ 457
24.2 The Policy Route Summary Screen ................................................................................ 458
24.2.1 The Policy Route Edit Screen ................................................................................460
Chapter 25
Bandwidth Management Screens........................................................................................465
25.1 Overview ..........................................................................................................................465
25.1.1 What You Can Do in the Bandwidth Management Screens ................................... 465
25.1.2 What You Need to Know About Bandwidth Management ...................................... 465
25.1.3 Application and Subnet-based Bandwidth Management Example ........................ 466
25.1.4 Over Allotment of Bandwidth Example ...................................................................467
25.1.5 Maximize Bandwidth Usage With Bandwidth Borrowing Example ......................... 467

Table of Contents
ZyWALL 5/35/70 Series User’s Guide
20
25.2 The Summary Screen ......................................................................................................467
25.2.1 Maximize Bandwidth Usage Example .................................................................... 470
25.2.2 Reserving Bandwidth for Non-Bandwidth Class Traffic .......................................... 471
25.3 The Class Setup Screen .................................................................................................471
25.4 Bandwidth Manager Class Configuration ...................................................................... 473
25.4.1 Bandwidth Borrowing Example ..............................................................................476
25.5 Bandwidth Management Statistics ................................................................................. 477
25.6 The Monitor Screen ......................................................................................................478
Chapter 26
DNS Screens .........................................................................................................................479
26.1 Overview ..........................................................................................................................479
26.1.1 What You Can Do in the DNS Screens .................................................................. 479
26.1.2 What You Need To Know About DNS .................................................................... 479
26.2 The System Screen .........................................................................................................481
26.2.1 The Add Address Record Screen .......................................................................... 483
26.2.2 The Insert Name Server Record Screen ................................................................ 484
26.3 The DNS Cache Screen .................................................................................................. 485
26.4 The DHCP Screen ...........................................................................................................487
26.5 The DDNS Screen ..........................................................................................................488
26.6 Configuring the Dynamic DNS Screen ............................................................................ 489
Chapter 27
Remote Management Screens.............................................................................................491
27.1 Overview ..........................................................................................................................491
27.1.1 What You Can Do in the Remote Management Screens .......................................491
27.1.2 What You Need To Know About Remote Management ......................................... 492
27.2 HTTPS Example ..............................................................................................................493
27.2.1 Internet Explorer Warning Messages ..................................................................... 493
27.2.2 Netscape Navigator Warning Messages ................................................................ 493
27.2.3 Avoiding the Browser Warning Messages .............................................................. 494
27.2.4 Login Screen .......................................................................................................... 495
27.2.5 Enrolling and Importing SSL Client Certificates (Example) .................................... 496
27.2.6 Installing the CA’s Certificate (Example) ................................................................ 497
27.2.7 Installing Your Personal Certificate(s) (Example) ................................................... 498
27.2.8 Using a Certificate When Accessing the ZyWALL (Example) ................................ 501
27.2.9 Secure Telnet Using SSH Examples ......................................................................502
27.3 The WWW Screen ......................................................................................................... 504
27.4 Configuring the WWW Screen ......................................................................................... 505
27.5 The SSH Screen .............................................................................................................507
27.6 Configuring the SSH Screen ........................................................................................... 507
27.7 The Telnet Screen ........................................................................................................... 508
27.8 The FTP Screen ............................................................................................................ 509