ZyXEL Communications ZYWALL 2 WG User manual

www.zyxel.com
ZyWALL 2WG
Internet Security Appliance
User’s Guide
Version 4.02
1/2007
Edition 1

About This User's Guide
ZyWALL 2WG User’s Guide 3
About This User's Guide
Intended Audience
This manual is intended for people who want to configure the ZyWALL using the web
configurator or System Management Terminal (SMT). You should have at least a basic
knowledge of TCP/IP networking concepts and topology.
Related Documentation
• Quick Start Guide
The Quick Start Guide is designed to help you get up and running right away. It contains
information on setting up your network and configuring for Internet access.
• Web Configurator Online Help
Embedded web help for descriptions of individual screens and supplementary
information.
• Supporting Disk
Refer to the included CD for support documents.
• ZyXEL Web Site
Please refer to www.zyxel.com for additional support documentation and product
certifications.
User Guide Feedback
Help us help you. Send all User Guide-related comments, questions or suggestions for
improvement to the following address, or use e-mail instead. Thank you!
The Technical Writing Team,
ZyXEL Communications Corp.,
6 Innovation Road II,
Science-Based Industrial Park,
Hsinchu, 300, Taiwan.
E-mail: [email protected]

Document Conventions
ZyWALL 2WG User’s Guide
4
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
1Warnings tell you about things that could harm you or your device.
"Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The ZyWALL 2WG may be referred to as the “ZyWALL”, the “device” or the “system” in
this User’s Guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example, [ENTER]
means the “enter” or “return” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the [ENTER] key.
“Select” or “choose” means for you to use one of the predefined choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example,
Maintenance > Log > Log Setting means you first click Maintenance in the navigation
panel, then the Log sub menu and finally the Log Setting tab to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value. For
example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000”
or “1048576” and so on.
• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”.

Document Conventions
ZyWALL 2WG User’s Guide 5
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The ZyWALL icon is not an
exact representation of your device.
ZyWALL Computer Notebook computer
Server DSLAM Firewall
Telephone Switch Router

Safety Warnings
ZyWALL 2WG User’s Guide
6
Safety Warnings
1For your safety, be sure to read and follow all warning notices and instructions.
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.
• Connect ONLY suitable accessories to the device.
• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel should
service or disassemble this device. Please contact your vendor for further information.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device.
• Connect the power adaptor or cord to the right supply voltage (for example, 110V AC in
North America or 230V AC in Europe).
• Not to remove the plug and plug into a wall outlet by itself; always attach the plug to the
power supply first before insert into the wall.
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.
• If the power adaptor or cord is damaged, remove it from the power outlet.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.
• Do not use the device outside, and make sure all the connections are indoors. There is a
remote risk of electric shock from lightning.
• CAUTION: RISK OF EXPLOSION IF BATTERY (on the motherboard) IS REPLACED
BY AN INCORRECT TYPE. DISPOSE OF USED BATTERIES ACCORDING TO THE
INSTRUCTIONS. Dispose them at the applicable collection point for the recycling of
electrical and electronic equipment. For detailed information about recycling of this
product, please contact your local city office, your household waste disposal service or the
store where you purchased the product.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.

Safety Warnings
ZyWALL 2WG User’s Guide 7
• Antenna Warning! This device meets ETSI and FCC certification requirements when
using the included antenna(s). Only use the included antenna(s).
• If you wall mount your device, make sure that no electrical lines, gas or water pipes will
be damaged.
This product is recyclable. Dispose of it properly.

Safety Warnings
ZyWALL 2WG User’s Guide
8

Contents Overview
ZyWALL 2WG User’s Guide 9
Contents Overview
Introduction ............................................................................................................................ 49
Getting to Know Your ZyWALL .................................................................................................. 51
Introducing the Web Configurator .............................................................................................. 55
Wizard Setup ............................................................................................................................. 75
Tutorial ....................................................................................................................................... 95
Registration ............................................................................................................................. 107
Network ................................................................................................................................. 111
LAN Screens ............................................................................................................................113
Bridge Screens ........................................................................................................................ 125
WAN Screens .......................................................................................................................... 131
DMZ Screens ........................................................................................................................... 163
Wireless LAN ........................................................................................................................... 173
Security ................................................................................................................................. 199
Firewall .................................................................................................................................... 201
Content Filtering Screens ........................................................................................................ 231
Content Filtering Reports ......................................................................................................... 249
IPSec VPN ............................................................................................................................... 257
Certificates ............................................................................................................................... 297
Authentication Server .............................................................................................................. 323
Advanced .............................................................................................................................. 327
Network Address Translation (NAT) ........................................................................................ 329
Static Route ............................................................................................................................. 345
Policy Route ............................................................................................................................ 349
Bandwidth Management .......................................................................................................... 355
DNS ......................................................................................................................................... 371
Remote Management ..............................................................................................................383
UPnP ....................................................................................................................................... 405
ALG Screen ............................................................................................................................. 415
Reports, Logs and Maintenance ......................................................................................... 421
Logs Screens ........................................................................................................................... 423
Maintenance ............................................................................................................................ 451

Contents Overview
ZyWALL 2WG User’s Guide
10
SMT and Troubleshooting ................................................................................................... 467
Introducing the SMT ................................................................................................................ 469
SMT Menu 1 - General Setup .................................................................................................. 477
WAN and Dial Backup Setup ................................................................................................... 483
LAN Setup ............................................................................................................................... 497
Internet Access ........................................................................................................................ 503
DMZ Setup .............................................................................................................................. 509
Route Setup ............................................................................................................................. 513
Wireless Setup ........................................................................................................................ 517
Remote Node Setup ................................................................................................................ 521
IP Static Route Setup .............................................................................................................. 529
Network Address Translation (NAT) ........................................................................................ 533
Introducing the ZyWALL Firewall ............................................................................................. 553
Filter Configuration .................................................................................................................. 555
SNMP Configuration ................................................................................................................ 571
System Information & Diagnosis ............................................................................................. 573
Firmware and Configuration File Maintenance ........................................................................ 585
System Maintenance Menus 8 to 10 ....................................................................................... 599
Remote Management ..............................................................................................................607
IP Policy Routing ......................................................................................................................611
Call Scheduling ........................................................................................................................ 619
Troubleshooting ....................................................................................................................... 623
Appendices and Index ......................................................................................................... 629

Table of Contents
ZyWALL 2WG User’s Guide 11
Table of Contents
About This User's Guide ..........................................................................................................3
Document Conventions............................................................................................................4
Safety Warnings........................................................................................................................ 6
Contents Overview ................................................................................................................... 9
Table of Contents.................................................................................................................... 11
List of Figures ......................................................................................................................... 29
List of Tables........................................................................................................................... 41
Part I: Introduction................................................................................. 49
Chapter 1
Getting to Know Your ZyWALL.............................................................................................. 51
1.1 ZyWALL Internet Security Appliance Overview ................................................................... 51
1.2 Ways to Manage the ZyWALL ............................................................................................. 51
1.3 Good Habits for Managing the ZyWALL .............................................................................. 52
1.4 Applications for the ZyWALL ............................................................................................... 52
1.4.1 Secure Broadband Internet Access via Cable or DSL Modem .................................. 52
1.4.2 VPN Application ......................................................................................................... 53
1.4.3 3G WAN Application ................................................................................................... 53
1.4.4 Front Panel Lights ...................................................................................................... 54
Chapter 2
Introducing the Web Configurator ........................................................................................ 55
2.1 Web Configurator Overview ................................................................................................. 55
2.2 Accessing the ZyWALL Web Configurator .......................................................................... 55
2.3 Resetting the ZyWALL ......................................................................................................... 57
2.3.1 Procedure To Use The Reset Button ......................................................................... 57
2.3.2 Uploading a Configuration File Via Console Port ....................................................... 57
2.4 Navigating the ZyWALL Web Configurator .......................................................................... 58
2.4.1 Title Bar ...................................................................................................................... 58
2.4.2 Main Window ..............................................................................................................59
2.4.3 HOME Screen: Router Mode ................................................................................... 59
2.4.4 HOME Screen: Bridge Mode .................................................................................... 62

Table of Contents
ZyWALL 2WG User’s Guide
12
2.4.5 Navigation Panel ........................................................................................................ 65
2.4.6 Port Statistics ........................................................................................................... 69
2.4.7 Show Statistics: Line Chart ........................................................................................ 70
2.4.8 DHCP Table Screen ................................................................................................ 71
2.4.9 VPN Status ................................................................................................................. 72
2.4.10 Bandwidth Monitor .................................................................................................. 73
Chapter 3
Wizard Setup ........................................................................................................................... 75
3.1 Wizard Setup Overview ...................................................................................................... 75
3.2 Internet Access ................................................................................................................... 75
3.2.1 ISP Parameters .......................................................................................................... 76
3.2.2 Internet Access Wizard: Second Screen .................................................................... 80
3.2.3 Internet Access Wizard: Registration ......................................................................... 81
3.2.4 Internet Access Wizard: Status .................................................................................. 83
3.2.5 Internet Access Wizard: Service Activation ............................................................... 84
3.3 VPN Wizard Gateway Setting .............................................................................................. 84
3.4 VPN Wizard Network Setting ............................................................................................... 86
3.5 VPN Wizard IKE Tunnel Setting (IKE Phase 1) ................................................................... 87
3.6 VPN Wizard IPSec Setting (IKE Phase 2) ........................................................................... 89
3.7 VPN Wizard Status Summary .............................................................................................. 90
3.8 VPN Wizard Setup Complete .............................................................................................. 93
Chapter 4
Tutorial ..................................................................................................................................... 95
4.1 Security Settings for VPN Traffic ......................................................................................... 95
4.2 Firewall Rule for VPN Example ........................................................................................... 95
4.2.1 Configuring the VPN Rule .......................................................................................... 96
4.2.2 Configuring the Firewall Rules ................................................................................... 99
4.3 How to Set up a 3G WAN Connection ............................................................................... 103
4.3.1 Configuring 3G WAN Settings .................................................................................. 103
4.3.2 Configuring Load Balancing ..................................................................................... 104
4.3.3 Inserting a 3G Card .................................................................................................. 104
4.3.4 Checking WAN Connections .................................................................................... 104
Chapter 5
Registration ........................................................................................................................... 107
5.1 myZyXEL.com overview .................................................................................................... 107
5.1.1 Content Filtering Subscription Service ..................................................................... 107
5.2 Registration ....................................................................................................................... 108
5.3 Service ............................................................................................................................... 109

Table of Contents
ZyWALL 2WG User’s Guide 13
Part II: Network......................................................................................111
Chapter 6
LAN Screens.......................................................................................................................... 113
6.1 LAN, WAN and the ZyWALL ...............................................................................................113
6.2 IP Address and Subnet Mask .............................................................................................113
6.2.1 Private IP Addresses .................................................................................................114
6.3 DHCP .................................................................................................................................115
6.3.1 IP Pool Setup ............................................................................................................115
6.4 RIP Setup ...........................................................................................................................115
6.5 Multicast .............................................................................................................................115
6.6 WINS ..................................................................................................................................116
6.7 LAN .....................................................................................................................................116
6.8 LAN Static DHCP ................................................................................................................119
6.9 LAN IP Alias .................................................................................................................... 120
6.10 LAN Port Roles ................................................................................................................ 122
Chapter 7
Bridge Screens...................................................................................................................... 125
7.1 Bridge Loop ....................................................................................................................... 125
7.2 Spanning Tree Protocol (STP) ........................................................................................... 126
7.2.1 Rapid STP ................................................................................................................126
7.2.2 STP Terminology ...................................................................................................... 126
7.2.3 How STP Works ....................................................................................................... 126
7.2.4 STP Port States ........................................................................................................ 127
7.3 Bridge ................................................................................................................................ 127
7.4 Bridge Port Roles ............................................................................................................. 129
Chapter 8
WAN Screens......................................................................................................................... 131
8.1 WAN Overview .................................................................................................................. 131
8.2 Multiple WAN ..................................................................................................................... 131
8.3 Load Balancing Introduction .............................................................................................. 132
8.4 Load Balancing Algorithms ................................................................................................ 132
8.4.1 Least Load First ....................................................................................................... 132
8.4.2 Weighted Round Robin ............................................................................................ 133
8.4.3 Spillover .................................................................................................................... 134
8.5 TCP/IP Priority (Metric) ...................................................................................................... 135
8.6 WAN General ..................................................................................................................... 135
8.7 Configuring Load Balancing .............................................................................................. 139
8.7.1 Least Load First ....................................................................................................... 139
8.7.2 Weighted Round Robin ............................................................................................ 140
8.7.3 Spillover .................................................................................................................... 140

Table of Contents
ZyWALL 2WG User’s Guide
14
8.8 WAN IP Address Assignment ............................................................................................ 141
8.9 DNS Server Address Assignment ..................................................................................... 142
8.10 WAN MAC Address ......................................................................................................... 142
8.11 WAN 1 ............................................................................................................................ 143
8.11.1 WAN Ethernet Encapsulation ................................................................................. 143
8.11.2 PPPoE Encapsulation ............................................................................................ 146
8.11.3 PPTP Encapsulation ............................................................................................... 149
8.12 WAN 2 (3G WAN) ...........................................................................................................152
8.13 Traffic Redirect ........................................................................................................... 156
8.14 Configuring Traffic Redirect ............................................................................................. 156
8.15 Configuring Dial Backup .................................................................................................. 157
8.16 Advanced Modem Setup ............................................................................................... 160
8.16.1 AT Command Strings ............................................................................................. 160
8.16.2 DTR Signal ............................................................................................................. 161
8.16.3 Response Strings ................................................................................................... 161
8.17 Configuring Advanced Modem Setup .............................................................................. 161
Chapter 9
DMZ Screens ......................................................................................................................... 163
9.1 DMZ ................................................................................................................................. 163
9.2 Configuring DMZ ............................................................................................................... 163
9.3 DMZ Static DHCP ............................................................................................................ 166
9.4 DMZ IP Alias .................................................................................................................... 167
9.5 DMZ Public IP Address Example ...................................................................................... 169
9.6 DMZ Private and Public IP Address Example ................................................................... 170
9.7 DMZ Port Roles ............................................................................................................... 171
Chapter 10
Wireless LAN......................................................................................................................... 173
10.1 Wireless LAN Introduction ............................................................................................... 173
10.2 Configuring WLAN ......................................................................................................... 174
10.3 WLAN Static DHCP ....................................................................................................... 177
10.4 WLAN IP Alias ............................................................................................................... 178
10.5 WLAN Port Roles ........................................................................................................... 180
10.6 Wireless Security Overview ............................................................................................. 182
10.6.1 SSID ....................................................................................................................... 182
10.6.2 MAC Address Filter ................................................................................................ 183
10.6.3 User Authentication ................................................................................................ 183
10.6.4 Encryption ..............................................................................................................183
10.6.5 Additional Installation Requirements for Using 802.1x ........................................... 184
10.7 Wireless Card ................................................................................................................ 185
10.7.1 SSID Profile ...........................................................................................................187
10.8 Configuring Wireless Security ......................................................................................... 188

Table of Contents
ZyWALL 2WG User’s Guide 15
10.8.1 No Security .............................................................................................................190
10.8.2 Static WEP ............................................................................................................. 190
10.8.3 IEEE 802.1x Only ................................................................................................... 191
10.8.4 IEEE 802.1x + Static WEP ..................................................................................... 192
10.8.5 WPA, WPA2, WPA2-MIX ........................................................................................ 194
10.8.6 WPA-PSK, WPA2-PSK, WPA2-PSK-MIX ............................................................... 195
10.9 MAC Filter ....................................................................................................................... 196
Part III: Security.................................................................................... 199
Chapter 11
Firewall................................................................................................................................... 201
11.1 Firewall Overview ............................................................................................................ 201
11.2 Packet Direction Matrix .................................................................................................... 202
11.3 Packet Direction Examples .............................................................................................. 203
11.3.1 To VPN Packet Direction ........................................................................................ 204
11.3.2 From VPN Packet Direction ................................................................................... 206
11.3.3 From VPN To VPN Packet Direction ...................................................................... 207
11.4 Security Considerations ...................................................................................................209
11.5 Firewall Rules Example ................................................................................................... 209
11.6 Asymmetrical Routes ........................................................................................................211
11.6.1 Asymmetrical Routes and IP Alias ..........................................................................211
11.7 Firewall Default Rule (Router Mode) ................................................................................ 212
11.8 Firewall Default Rule (Bridge Mode) .............................................................................. 214
11.9 Firewall Rule Summary ................................................................................................... 215
11.9.1 Firewall Edit Rule .............................................................................................. 217
11.10 Anti-Probing ............................................................................................................... 220
11.11 Firewall Thresholds ..................................................................................................... 221
11.11.1 Threshold Values .................................................................................................. 222
11.12 Threshold Screen ........................................................................................................... 222
11.13 Service .......................................................................................................................... 224
11.13.1 Firewall Edit Custom Service .............................................................................. 225
11.14 My Service Firewall Rule Example ................................................................................ 226
Chapter 12
Content Filtering Screens .................................................................................................... 231
12.1 Content Filtering Overview .............................................................................................. 231
12.1.1 Restrict Web Features ........................................................................................... 231
12.1.2 Create a Filter List .................................................................................................. 231
12.1.3 Customize Web Site Access ................................................................................. 231
12.2 Content Filter General Screen ........................................................................................ 231

Table of Contents
ZyWALL 2WG User’s Guide
16
12.3 Content Filtering with an External Database ................................................................... 234
12.4 Content Filter Categories ..............................................................................................234
12.5 Content Filter Customization ........................................................................................ 243
12.6 Customizing Keyword Blocking URL Checking ............................................................... 245
12.6.1 Domain Name or IP Address URL Checking ......................................................... 246
12.6.2 Full Path URL Checking ......................................................................................... 246
12.6.3 File Name URL Checking ....................................................................................... 246
12.7 Content Filtering Cache .................................................................................................246
Chapter 13
Content Filtering Reports..................................................................................................... 249
13.1 Checking Content Filtering Activation .............................................................................. 249
13.2 Viewing Content Filtering Reports ................................................................................... 249
13.3 Web Site Submission .......................................................................................................254
Chapter 14
IPSec VPN.............................................................................................................................. 257
14.1 IPSec VPN Overview ..................................................................................................... 257
14.1.1 IKE SA Overview .................................................................................................... 258
14.2 VPN Rules (IKE) .............................................................................................................. 259
14.3 IKE SA Setup .................................................................................................................. 261
14.3.1 IKE SA Proposal .................................................................................................... 261
14.4 Additional IPSec VPN Topics ........................................................................................... 265
14.4.1 SA Life Time ........................................................................................................... 265
14.4.2 IPSec High Availability ........................................................................................... 266
14.4.3 Encryption and Authentication Algorithms ............................................................. 267
14.5 VPN Rules (IKE) Gateway Policy Edit ............................................................................. 267
14.6 IPSec SA Overview .....................................................................................................273
14.6.1 Local Network and Remote Network ...................................................................... 273
14.6.2 Active Protocol ....................................................................................................... 273
14.6.3 Encapsulation ......................................................................................................... 274
14.6.4 IPSec SA Proposal and Perfect Forward Secrecy ................................................. 274
14.7 VPN Rules (IKE): Network Policy Edit ............................................................................ 275
14.8 VPN Rules (IKE): Network Policy Move ........................................................................ 279
14.9 Dialing the VPN Tunnel via Web Configurator ................................................................. 280
14.10 VPN Troubleshooting ..................................................................................................... 281
14.10.1 VPN Log ............................................................................................................... 282
14.11 IPSec Debug .................................................................................................................. 283
14.12 IPSec SA Using Manual Keys ................................................................................... 284
14.12.1 IPSec SA Proposal Using Manual Keys ............................................................... 284
14.12.2 Authentication and the Security Parameter Index (SPI) ....................................... 284
14.13 VPN Rules (Manual) ...................................................................................................... 284
14.14 VPN Rules (Manual): Edit ........................................................................................... 286

Table of Contents
ZyWALL 2WG User’s Guide 17
14.15 VPN SA Monitor .......................................................................................................... 289
14.16 VPN Global Setting ....................................................................................................... 289
14.17 Telecommuter VPN/IPSec Examples ............................................................................ 291
14.17.1 Telecommuters Sharing One VPN Rule Example ................................................ 291
14.17.2 Telecommuters Using Unique VPN Rules Example ............................................. 292
14.18 VPN and Remote Management ..................................................................................... 294
14.19 Hub-and-spoke VPN ...................................................................................................... 294
14.19.1 Hub-and-spoke VPN Example ............................................................................. 295
14.19.2 Hub-and-spoke Example VPN Rule Addresses ................................................... 295
14.19.3 Hub-and-spoke VPN Requirements and Suggestions ......................................... 296
Chapter 15
Certificates ............................................................................................................................ 297
15.1 Certificates Overview ....................................................................................................... 297
15.1.1 Advantages of Certificates ..................................................................................... 298
15.2 Self-signed Certificates .................................................................................................... 298
15.3 Verifying a Certificate ....................................................................................................... 298
15.3.1 Checking the Fingerprint of a Certificate on Your Computer .................................. 298
15.4 Configuration Summary ................................................................................................... 299
15.5 My Certificates ................................................................................................................ 300
15.6 My Certificate Details ..................................................................................................... 301
15.7 My Certificate Export ...................................................................................................... 304
15.7.1 Certificate File Export Formats ............................................................................... 304
15.8 My Certificate Import ..................................................................................................... 305
15.8.1 Certificate File Formats .......................................................................................... 306
15.9 My Certificate Create ..................................................................................................... 308
15.10 Trusted CAs ................................................................................................................. 310
15.11 Trusted CA Details .........................................................................................................311
15.12 Trusted CA Import ....................................................................................................... 314
15.13 Trusted Remote Hosts ................................................................................................. 315
15.14 Trusted Remote Hosts Import ...................................................................................... 317
15.15 Trusted Remote Host Certificate Details ..................................................................... 318
15.16 Directory Servers .......................................................................................................... 320
15.17 Directory Server Add or Edit ........................................................................................ 321
Chapter 16
Authentication Server...........................................................................................................323
16.1 Authentication Server Overview ...................................................................................... 323
16.1.1 Local User Database .............................................................................................. 323
16.1.2 RADIUS ..................................................................................................................323
16.2 Local User Database .....................................................................................................323
16.3 RADIUS ......................................................................................................................... 325

Table of Contents
ZyWALL 2WG User’s Guide
18
Part IV: Advanced ................................................................................ 327
Chapter 17
Network Address Translation (NAT).................................................................................... 329
17.1 NAT Overview ................................................................................................................ 329
17.1.1 NAT Definitions ...................................................................................................... 329
17.1.2 What NAT Does ..................................................................................................... 330
17.1.3 How NAT Works ..................................................................................................... 330
17.1.4 NAT Application ...................................................................................................... 331
17.1.5 Port Restricted Cone NAT ...................................................................................... 332
17.1.6 NAT Mapping Types ............................................................................................... 332
17.2 Using NAT ........................................................................................................................ 333
17.2.1 SUA (Single User Account) Versus NAT ................................................................ 333
17.3 NAT Overview Screen ..................................................................................................... 334
17.4 NAT Address Mapping ................................................................................................... 335
17.4.1 What NAT Does ..................................................................................................... 335
17.4.2 NAT Address Mapping Edit .................................................................................. 337
17.5 Port Forwarding .............................................................................................................. 338
17.5.1 Default Server IP Address ...................................................................................... 339
17.5.2 Port Forwarding: Services and Port Numbers ........................................................ 339
17.5.3 Configuring Servers Behind Port Forwarding (Example) ....................................... 340
17.5.4 NAT and Multiple WAN ........................................................................................... 340
17.5.5 Port Translation ...................................................................................................... 340
17.6 Port Forwarding Screen ................................................................................................... 341
17.7 Port Triggering ............................................................................................................... 343
Chapter 18
Static Route ........................................................................................................................... 345
18.1 IP Static Route .............................................................................................................. 345
18.2 IP Static Route ................................................................................................................. 345
18.2.1 IP Static Route Edit .............................................................................................. 347
Chapter 19
Policy Route .......................................................................................................................... 349
19.1 Policy Route ................................................................................................................... 349
19.2 Benefits ............................................................................................................................ 349
19.3 Routing Policy .................................................................................................................. 349
19.4 IP Routing Policy Setup ...................................................................................................350
19.5 Policy Route Edit ............................................................................................................ 351
Chapter 20
Bandwidth Management....................................................................................................... 355
20.1 Bandwidth Management Overview ................................................................................. 355

Table of Contents
ZyWALL 2WG User’s Guide 19
20.2 Bandwidth Classes and Filters ........................................................................................ 355
20.3 Proportional Bandwidth Allocation ................................................................................... 356
20.4 Application-based Bandwidth Management .................................................................... 356
20.5 Subnet-based Bandwidth Management .......................................................................... 356
20.6 Application and Subnet-based Bandwidth Management ................................................. 356
20.7 Scheduler ........................................................................................................................ 357
20.7.1 Priority-based Scheduler ........................................................................................ 357
20.7.2 Fairness-based Scheduler ..................................................................................... 357
20.7.3 Maximize Bandwidth Usage ................................................................................... 357
20.7.4 Reserving Bandwidth for Non-Bandwidth Class Traffic .......................................... 357
20.7.5 Maximize Bandwidth Usage Example .................................................................... 358
20.8 Bandwidth Borrowing .......................................................................................................359
20.8.1 Bandwidth Borrowing Example .............................................................................. 359
20.9 Maximize Bandwidth Usage With Bandwidth Borrowing ................................................. 360
20.10 Over Allotment of Bandwidth ......................................................................................... 361
20.11 Configuring Summary .................................................................................................... 361
20.12 Configuring Class Setup .............................................................................................. 363
20.12.1 Bandwidth Manager Class Configuration ........................................................... 364
20.12.2 Bandwidth Management Statistics ................................................................... 367
20.13 Bandwidth Manager Monitor ........................................................................................ 368
Chapter 21
DNS ........................................................................................................................................ 371
21.1 DNS Overview ............................................................................................................... 371
21.2 DNS Server Address Assignment ................................................................................... 371
21.3 DNS Servers .................................................................................................................... 371
21.4 Address Record ............................................................................................................... 372
21.4.1 DNS Wildcard ......................................................................................................... 372
21.5 Name Server Record ....................................................................................................... 372
21.5.1 Private DNS Server ................................................................................................ 372
21.6 System Screen ................................................................................................................ 373
21.6.1 Adding an Address Record .................................................................................. 375
21.6.2 Inserting a Name Server Record .......................................................................... 376
21.7 DNS Cache .................................................................................................................... 377
21.8 Configure DNS Cache ..................................................................................................... 377
21.9 Configuring DNS DHCP ................................................................................................ 379
21.10 Dynamic DNS .............................................................................................................. 380
21.10.1 DYNDNS Wildcard ............................................................................................... 380
21.10.2 High Availability .................................................................................................... 381
21.11 Configuring Dynamic DNS ............................................................................................. 381
Chapter 22
Remote Management............................................................................................................ 383

Table of Contents
ZyWALL 2WG User’s Guide
20
22.1 Remote Management Overview ...................................................................................... 383
22.1.1 Remote Management Limitations .......................................................................... 384
22.1.2 System Timeout ..................................................................................................... 384
22.2 WWW (HTTP and HTTPS) ............................................................................................. 384
22.3 WWW .............................................................................................................................. 385
22.4 HTTPS Example .............................................................................................................. 387
22.4.1 Internet Explorer Warning Messages ..................................................................... 387
22.4.2 Netscape Navigator Warning Messages ................................................................ 387
22.4.3 Avoiding the Browser Warning Messages .............................................................. 388
22.4.4 Login Screen .......................................................................................................... 389
22.5 SSH .............................................................................................................................. 391
22.6 How SSH Works .............................................................................................................. 391
22.7 SSH Implementation on the ZyWALL .............................................................................. 392
22.7.1 Requirements for Using SSH ................................................................................. 392
22.8 Configuring SSH .............................................................................................................. 393
22.9 Secure Telnet Using SSH Examples ............................................................................... 394
22.9.1 Example 1: Microsoft Windows .............................................................................. 394
22.9.2 Example 2: Linux .................................................................................................... 394
22.10 Secure FTP Using SSH Example .................................................................................. 395
22.11 Telnet ........................................................................................................................... 396
22.12 Configuring TELNET ..................................................................................................... 396
22.13 FTP .............................................................................................................................. 397
22.14 SNMP .......................................................................................................................... 398
22.14.1 Supported MIBs .................................................................................................. 399
22.14.2 SNMP Traps ......................................................................................................... 400
22.14.3 REMOTE MANAGEMENT: SNMP ....................................................................... 400
22.15 DNS ............................................................................................................................. 401
22.16 Introducing Vantage CNM ............................................................................................. 402
22.17 Configuring CNM ........................................................................................................... 402
Chapter 23
UPnP ...................................................................................................................................... 405
23.1 Universal Plug and Play Overview ................................................................................ 405
23.1.1 How Do I Know If I'm Using UPnP? ....................................................................... 405
23.1.2 NAT Traversal ........................................................................................................ 405
23.1.3 Cautions with UPnP ............................................................................................... 405
23.1.4 UPnP and ZyXEL ................................................................................................... 406
23.2 Configuring UPnP ............................................................................................................ 406
23.3 Displaying UPnP Port Mapping .................................................................................... 407
23.4 Installing UPnP in Windows Example .............................................................................. 408
23.4.1 Installing UPnP in Windows Me ............................................................................. 409
23.4.2 Installing UPnP in Windows XP ............................................................................. 410
23.5 Using UPnP in Windows XP Example ............................................................................. 410