ZyXEL Communications ADSL 2+ Security Gateway User manual

ZyWALL 2 Plus
Internet Security Appliance
Quick Start Guide
Version 4.00
4/2006
Edition 1
Table of Contents
ENGLISH 2
DEUTSCH 16
ESPAÑOL 32
FRANÇAIS 46
ITALIANO 60
РУССКИЙ 74
SVENSKA 90
繁體中文 104

ENGLISH
2
Overview
The ZyWALL 2 Plus is a firewall with VPN, bandwidth management, content filtering and many other features.
You can use it as a transparent firewall and not reconfigure your network nor configure the ZyWALL’s routing
features. This guide covers the initial connections and configuration needed to start using the ZyWALL in your
network.
See the User’s Guide for more information on all features.
You may need your Internet access information.
This guide is divided into the following sections.
1 Hardware Connections
You need the following.
1Hardware Connections
2Accessing the Web Configurator
3Bridge Mode
4Internet Access Setup and Product Registration
5NAT
6Firewall
7VPN Rule Setup
8Troubleshooting
ZyWALL Computer Ethernet Cables Power Adaptor
ENGLISH

ENGLISH
3
Do the following to make hardware connections for initial setup.
1Use an Ethernet cable to connect a LAN port to a computer.
2Use another Ethernet cable to connect the WAN port to an Ethernet jack with Internet access.
Note: Use the blue console cable if you want to connect the CONSOLE port to your computer. Use the
black dial backup cable if you want to connect the DIAL BACKUP port to an analog modem.

ENGLISH
4
3Use the included power adaptor to connect the power socket (on the rear panel) to a power outlet.
4Look at the front panel. The PWR LED turns on. The ACT, LAN and WAN LEDs turn on and stay on if the
corresponding connections are properly made.
2 Accessing the Web Configurator
Use this section to configure the WAN interface for Internet access.
1Launch your web browser. Enter 192.168.1.1 (the
ZyWALL’s default IP address) as the address.
If the login screen does not display, see Section
7.1 to set your computer’s IP address.
2Click Login (the default password 1234 is already
entered).
3Change the login password by entering a new
password and clicking Apply.
4Click Apply to replace the ZyWALL’s default
digital certificate.

ENGLISH
5
5The HOME screen opens.
The ZyWALL is in router mode by default. Continue to the next step if you want to use routing features
such as NAT, DHCP and VPN.
Go to Section 3 if you prefer to use the ZyWALL as a transparent firewall.
3 Bridge Mode
When you set the ZyWALL to bridge mode, it functions as a transparent firewall. Do the following to set the
ZyWALL to bridge mode.
6Check the Network
Status table. If the
WAN status is not
Down and there is an
IP address, go to
Section 5.
If the WAN status is
Down (or there is not
an IP address), click
Internet Access and
use Section 4 to
configure WAN.

ENGLISH
6
4 Internet Access Setup and Product Registration
1Click Internet Access in the HOME screen to open the Internet access wizard.
Enter the Internet access information exactly as given to you.
If you were given an IP address to use, select Static in the IP Address Assignment drop-down list box and
enter the information provided.
Note: The fields vary depending on what you select in the Encapsulation field. Fill them in with the
information provided by the ISP or network administrator.
Click Apply when you are done.
1Click MAINTENANCE in the
navigation panel and then
Device Mode.
2Select Bridge and configure a
(static) IP address, subnet
mask and gateway IP
address. These apply to the
ZyWALL’s LAN and WAN
interfaces.
3Click Apply. The ZyWALL
restarts.

ENGLISH
7
•PPP over Ethernet or PPTP Encapsulation
Select Nailed-Up when you want your connection up all the time (this could be expensive if your ISP bills you
for Internet usage time instead of a flat monthly fee).
To not have the connection up all the time, specify an idle time-out period (in seconds) in Idle Timeout.
•Ethernet Encapsulation
Configure a Roadrunner service in the
NETWORK WAN screens (use the WAN tab).

ENGLISH
8
2Click Next to display the screen where you
can register your ZyWALL with myZyXEL.com
(ZyXEL’s online services center) and activate
the free content filtering trial application.
Otherwise, click Skip and then Close to
complete Internet access setup.
3If you already have an account at
myZyXEL.com, select Existing
myZyXEL.com account and enter account
information. Otherwise, select New
myZyXEL.com account and fill in the
fields below to create a new account and
register your ZyWALL. Click Next.
4Wait for the registration progress to finish.
5The following screen displays if the registration
was not successful. Click Return to go back to
the Device Registration screen and check your
settings.

ENGLISH
9
6Click Close to leave the wizard screen when
the registration and activation are done.
Note: If you want to activate a standard
service with your iCard’s PIN number
(license key), use the
REGISTRATION Service screen.
See the user’s guide for details.
5 Firewall
You can use the ZyWALL without configuring the firewall.
The ZyWALL’s firewall is pre-configured to protect your LAN from attacks from the Internet. By default, no
traffic can enter your LAN unless a request was generated on the LAN first.
If you are using the ZyWALL in router mode, continue with the next section. For bridge mode, skip to Section
7.
6 VPN Rule Setup
A VPN (Virtual Private
Network) tunnel gives you a
secure connection to another
computer or network.
A gateway policy identifies the
IPSec routers at either end of a
VPN tunnel.
A network policy specifies
which devices (behind the
IPSec routers) can use the
VPN tunnel.

ENGLISH
10
This figure helps explain the main fields in the wizard screens.
1Click VPN in the HOME screen (you may need to scroll up to see the link) to open the VPN wizard.
Note: Your settings are not saved when you click Back.
2Use this screen to configure the gateway policy.
Name: Enter a name to identify the gateway policy.
Remote Gateway Address: Enter the IP address or
domain name of the remote IPSec router.
3Use this screen to configure the network policy.
Leave the Active check box selected.
Name: Enter a name to identify the network policy.
Select Single and enter an IP address for a single IP
address.
Select Range IP and enter starting and ending IP
addresses for a specific range of IP addresses.
Select Subnet and enter an IP address and subnet
mask to specify IP addresses on a network by their
subnet mask.