ZyXEL Communications Unified Security Gateway ZyWALL 300 User manual

www.zyxel.com
Unified Security Gateway
Firmware v2.11
Edition 1, 11/2008
QUICK START GUIDE
ZyWALL USG 300
DEFAULT LOGIN DETAILS
IP Address: https://192.168.1.1
Username: admin
Password: 1234
CONTENTS
ENGLISH 3
DEUTSCH 17
ESPAÑOL 33
FRANÇAIS 47
ITALIANO 61
РУССКИЙ 89
简体中文 103
繁體中文 115
Copyright 2008 ZyXEL Communications Corporation
C

2
Front and Rear Panels
SYS CARD 1-2
PWR AUX
USB 1-2
P1 - P7
EXTENSION
CARD SLOT 2
POWER
AUX CONSOLE
SOCKET
EXTENSION
CARD SLOT 1
RESET

ENGLISH
3
ENGLISH
Checking the Package Contents
Your package should include one of each of the following:
• ZyWALL USG
300
• Power cord
• Rack-mounting
kit
• RJ-45 Ethernet cable
• RS-232 console Y-
cable
• Printed Quick Start
Guide
• Configuration
Reference
Card
• Compact disk
(CD)

4
Rack-mounted Installation
Mount the ZyWALL in a 19-inch rack or place it on a sturdy, flat surface.
Leave 10 cm of clearance at the sides and 20 cm in the rear.
1. Align one bracket with the holes on one side of the ZyWALL and
secure it with the included bracket screws. Similarly, attach the other
bracket.
2. After attaching both mounting brackets, position the ZyWALL in the
rack by lining up the holes in the brackets with the appropriate holes
on the rack. Secure the ZyWALL to the rack with the rack-mounting
screws.

ENGLISH
5
Connecting the Hardware
Make sure that the power switch on the rear panel is turned off before
you make the hardware connections.
1. It is recommended that you configure the ZyWALL before using it to
protect your network. Use an Ethernet cable to connect a computer to
port 1.
2. Use another Ethernet cable(s) to connect port 2 and/or port 3to an
Ethernet jack with Internet access.
3. Use the included power cord to connect the power socket on the rear
panel to a power outlet.

6
4. Push the power switch to the on position and look at the front panel.
The PWR light turns on. The SYS light blinks during system testing
and initialization and then stays on when the system is ready.

ENGLISH
7
Web Login
1. Launch your web browser
and go to http://192.168.1.1
(the ZyWALL automatically
redirects you to https://
192.168.1.1).
2. Click Yes to proceed if
you get a security alert
or certificate screen.

8
3. Enter admin as
the user name
and 1234 as the
password. Click
Login.
4. It is strongly recommended
that you change the
password. Type and retype
a new password, and click
Apply.

ENGLISH
9
Installation Setup Wizard
Use an installation setup wizard to connect to the Internet and register
the ZyWALL and/or activate trial services, like IDP and content filter.
Use the installation wizard only for initial configuration starting
from the default configuration.
The Status screen opens. Click the Wizard icon in the upper right
corner.

10
Changes you make in the installation wizard may not be applied if you
have already changed the ZyWALL’s configuration.
• INSTALLATION
SETUP, ONE ISP
sets up a single
Internet
connection for
ge2.
• INSTALLATION SETUP, TWO ISP sets up Internet connections for
ge2 and ge3.
The wizard screens vary
depending on the
encapsulation type you
use. Refer to
information provided by
your ISP and the web
help screens to know
what to enter in each
field. You can leave
fields blank if you don’t
have that information.

ENGLISH
11
Default Settings and Port Details
The ZyWALL is configured for the following network topology by default.

12
Port Interfa
ce
Zon
e
IP Address and
DHCP Settings
Suggested Use
With Default
Settings
1ge1 LAN 192.168.1.1, DHCP
server enabled
Protected LAN
2, 3ge2,
ge3
WAN DHCP clients Connections to the
Internet
4ge4 DMZ 192.168.2.1, DHCP
server disabled
Public servers (such as
web, e-mail and FTP)
5ge5 DMZ 192.168.3.1, DHCP
server disabled
Public servers (such as
web, e-mail and FTP)
6ge6 WLA
N
10.59.0.1, DHCP
server enabled
Wireless access points
7ge7 None None, DHCP server
disabled
Optional
AUX aux None None Auxiliary modem
CONSOLE N/A None None Local management

ENGLISH
13
Label Type Description
USB USB Connect a (USB) 3G wireless card to access the Internet
through a 3G network. At the time of writing, you can use
the Huawei E220, E270.
P1~P7 RJ-45 Use 8-wire Category 5e or above Ethernet cables to connect
routers, switches, computers, routers, access points, and so
on.
AUX RS-232 Use an RS-232 console cable to connect dial backup/dial-in
modem.
CONSOLE RS-232 Use an RS-232 console cable to connect a local computer
for command-based management.
EXTENSIO
N CARD
SLOT
PCMCI
A
Insert a wireless LAN card to use the wireless LAN feature.
At the time of writing, you can use ZyXEL’s G-170S wireless
card. You can optionally insert a 3G wireless card to access
the Internet wirelessly via a 3G network. At the time of
writing, you can use a Sierra Wireless AC850, AC860,
AC880 or AC881 3G wireless card.

14
Troubleshooting
Problem Corrective Action
None of the
LEDs turn on.
Make sure that you have the power cord connected to the
ZyWALL and plugged in to an appropriate power source. Make
sure you have the ZyWALL turned on. Check all cable
connections.
If the LEDs still do not turn on, you may have a hardware
problem. In this case, you should contact your local vendor.

ENGLISH
15
Cannot access
the ZyWALL from
the LAN.
Check the cable connection between the ZyWALL and your
computer or switch. Refer to section for details.
Ping the ZyWALL from a LAN computer. Make sure your
computer’s Ethernet card is installed and functioning properly.
Also make sure that its IP address is in the same subnet as the
ZyWALL’s.
In the computer, click Start, (All) Programs, Accessories and
then Command Prompt. In the Command Prompt window, type
"ping" followed by the ZyWALL’s LAN IP address (192.168.1.1 is
the default) and then press [ENTER]. The ZyWALL should reply.
If you’ve forgotten the ZyWALL’s password, use the RESET
button. Press the button in for about 5 seconds (or until the PWR
LED starts to blink), then release it. It returns the ZyWALL to the
factory defaults (password is 1234, LAN IP address 192.168.1.1
etc.; see your User’s Guide for details).
If you’ve forgotten the ZyWALL’s IP address, you can use the
commands through the console port to check it. Connect your
computer to the CONSOLE port using a console cable. Your
computer should have a terminal emulation communications
program (such as HyperTerminal) set to VT100 terminal
emulation, no parity, 8 data bits, 1 stop bit, no flow control and
115200 bps port speed.
Cannot access
the Internet.
Check the ZyWALL’s connection to the Ethernet jack with Internet
access. Make sure the Internet gateway device (such as a DSL
modem) is working properly.
Check ge2’s status in the Status screen. Use the installation
setup wizard again and make sure that you enter the correct
settings.
Problem Corrective Action

16
Procedure to View a Product’s
Certification(s)
1. Go to www.zyxel.com.
2. Select your product from the drop-down list box on the ZyXEL home
page to go to that product's page.
3. Select the certification you wish to view from this page.

DEUTSCH
17
DEUTSCH
Prüfen des Packungsinhalts
Prüfen Sie ob alle Teile vorhanden sind:
• ZyWALL USG 300
• Netzkabel
• Rackmontage-
Zubehör
• RJ-45-Ethernetkabel
• Y-Kabel für RS-232-
Konsole
• Kurzanleitung in
Druckform
• Konfiguratio
nskarte
• CD

18
Rackmontage
Montieren Sie die ZyWALL an einem 19"-Rack oder stellen Sie es auf
eine stabile Unterlage.
Lassen Sie seitlich 10 cm und hinten 20 cm Platz.
1. Richten Sie eine Halterung an den Löchern an der Seite der ZyWALL
aus und schrauben Sie sie mit den mitgelieferten Montageschrauben
fest. Verfahren Sie ebenso mit der zweiten Halterung.

DEUTSCH
19
2. Wenn Sie beide Montagehalterungen befestigt haben, richten Sie die
ZyWALL im so im Rack aus, dass die entsprechenden Schraublöcher
übereinander stehen. Befestigen Sie den ZyWALL mit den
Befestigungsschrauben am Rack.

20
Anschließen der Hardware
Stellen Sie sicher, dass der Netzschalter an der Rückseite des Geräts
ausgeschaltet ist, bevor Sie die ZyWALL in Betrieb nehmen.
1. Es wird empfohlen, die ZyWALL zu konfigurieren, bevor Sie sie zum
in Ihrem Netzwerk einsetzen. Schließen Sie einen Computer mit
einem Ethernetkabel an Port 1 an.
2. Schließen Sie an Port 2 und/oder Port 3Ihren Router mit
Internetzugriff an.
3. Schliessen Sie den Netzanschluss des Geräts (an der Rückseite) mit
dem mitgelieferten Netzkabel an eine Netzsteckdose an.