ZyXEL Communications ZyWALL 70 User manual

Copyright © 2007. All rights reserved.
ZyWALL 70
Internet Security Appliance
Quick Start Guide
Version 4.03
10/2007
Edition 1
DEFAULT LOGIN
IP Address http://192.168.1.1
User Name admin
Password 1234
CONTENTS
ENGLISH 2
DEUTSCH 19
ESPAÑOL 37
FRANÇAIS 54
ITALIANO 71
РУССКИЙ 88
简体中文 106
繁體中文 122

ENGLISH
2
Overview
The ZyWALL 70 is a load-balancing, dual WAN firewall with VPN, bandwidth management, content filtering,
anti-spam, anti-virus, IDP (Intrusion Detection and Protection) and many other features. You can use it as a
transparent firewall and not reconfigure your network nor configure the ZyWALL’s routing features. The
ZyWALL increases network security by providing DMZ ports for use with publicly accessible servers. This
guide covers the initial connections and configuration needed to start using the ZyWALL in your network.
See the User’s Guide for more information on all features.
You may need your Internet access information.
This guide is divided into the following sections.
1 Hardware Connections
You need the following.
1Hardware Connections
2Accessing the Web Configurator
3Bridge Mode
4Internet Access Setup and Product Registration
5DNS
6NAT
7Firewall
8VPN Rule Setup
9Anti-Spam Setup
10Troubleshooting
ZyWALL Computer Ethernet Cables Power Cord
ENGLISH

ENGLISH
3
Do the following to make hardware connections for initial setup.
1Use an Ethernet cable to connect the LAN port to a computer. You can also use Ethernet cables to
connect public servers (web, e-mail, FTP, etc.) to the DMZ ports.
2Use another Ethernet cable(s) to connect the WAN 1 and/or WAN 2 port to an Ethernet jack with Internet
access.
3Insert the ZyWALL Turbo extension card to use the anti-virus and IDP features or insert a wireless LAN
card to use the wireless LAN feature. See the ZyWALL Turbo Card guide for more information about the
extension card. See the user’s guide about installing a wireless LAN card.
4Use the included power cord to connect the power socket (on the rear panel) to a power outlet.
5Push the power switch to the on position and look at the front panel. The PWR LED turns on. The SYS
LED blinks while performing system testing and then stays on if the testing is successful. The ACT, CARD,
LAN, DMZ, and WAN LEDs turn on and stay on if the corresponding connections are properly made.

ENGLISH
4
2 Accessing the Web Configurator
Use this section to configure the WAN 1 interface for Internet access.
5The HOME screen opens.
The ZyWALL is in router mode by default. Continue to the next step if you want to use routing features
such as NAT, DHCP and VPN.
Go to Section 3 if you prefer to use the ZyWALL as a transparent firewall.
1Launch your web browser. Enter 192.168.1.1 (the
ZyWALL’s default IP address) as the address.
If the login screen does not display, see Section
10.1 to set your computer’s IP address.
2Click Login (the default password 1234 is already
entered).
3Change the login password by entering a new
password and clicking Apply.
4Click Apply to replace the ZyWALL’s default
digital certificate.

ENGLISH
5
6Check the
Network
Status
table. If the
WAN 1
status is not
Down and
there is an
IP address,
go to
Section 5.
If the WAN
1status is
Down (or
there is not
an IP
address),
click the
Wizard icon
and use
Section 4 to configure WAN 1.
Use the NETWORK WAN screens if you need to configure WAN 2. You can also configure load balancing
between the WAN ports.
3 Bridge Mode
When you set the ZyWALL to bridge mode, it functions as a transparent firewall. Do the following to set the
ZyWALL to bridge mode.

ENGLISH
6
4 Internet Access Setup and Product Registration
1Click the Wizard icon in the HOME screen and then
Internet Access Setup to open the Internet access
wizard.
Enter the Internet access information exactly as given to
you.
If you were given an IP address to use, select Static in the
IP Address Assignment drop-down list box and enter the
information provided.
Note: The fields vary depending on what you select in
the Encapsulation field. Fill them in with the
information provided by the ISP or network
administrator.
Click Apply when you are done.
1Click MAINTENANCE in
the navigation panel and
then Device Mode.
2Select Bridge and
configure a (static) IP
address subnet mask and
gateway IP address for
the ZyWALL’s LAN, WAN,
DMZ and WLAN
interfaces.
3Click Apply. The ZyWALL
restarts.
Skip to Section 5 if you have
servers that you need to be
accessible from the WAN.

ENGLISH
7
• PPP over Ethernet or PPTP Encapsulation
Select Nailed-Up when you want your connection up all the time (this could be expensive if your ISP bills you
for Internet usage time instead of a flat monthly fee).
To not have the connection up all the time, specify an idle time-out period (in seconds) in Idle Timeout.
•Ethernet Encapsulation
Configure a Roadrunner service in the
NETWORK WAN screens (use the WAN 1
tab).

ENGLISH
8
2Click Next to display the screen where you
can register your ZyWALL with myZyXEL.com
(ZyXEL’s online services center) and activate
the free content filtering, anti-spam, anti-virus
and IDP trial applications. Otherwise, click
Skip and then Close to complete Internet
access setup.
Note: Make sure you have installed the ZyWALL Turbo Card before you activate the IDP and anti-virus
subscription services.
Turn the ZyWALL off before you install or remove the ZyWALL Turbo Card.
3If you already have an account at
myZyXEL.com, select Existing
myZyXEL.com account and enter account
information. Otherwise, select New
myZyXEL.com account and fill in the
fields below to create a new account and
register your ZyWALL. Click Next.
4Wait for the registration progress to finish.

ENGLISH
9
5The following screen displays if the registration
was not successful. Click Return to go back to
the Device Registration screen and check your
settings.
6Click Close to leave the wizard screen when
the registration and activation are done.
Note: If you want to activate a standard
service with your iCard’s PIN number
(license key), use the
REGISTRATION Service screen.
See the user’s guide for details.
5 DMZ
The DeMilitarized Zone (DMZ) allows public servers (web, e-mail, FTP, etc.) to be visible to the outside world
and still have firewall protection from DoS (Denial of Service) attacks.
Unlike the LAN, the ZyWALL does not assign TCP/IP configuration via DHCP to computers connected to the
DMZ ports. Configure the computers with static IP addresses (in the same subnet as the DMZ port's IP
address) and DNS server addresses. Use the ZyWALL's DMZ IP address as the default gateway.
Do the following to configure the DMZ if the ZyWALL is in routing mode.
Note: You do not need to configure DMZ with bridge mode, skip to Section 7.
1Click NETWORK, DMZ in the navigation panel.

ENGLISH
10
6 NAT
NAT (Network Address Translation - NAT, RFC 1631) means the translation of an IP address in one network
to a different IP address in another. You can use the NAT Address Mapping screens to have the ZyWALL
translate multiple public IP addresses to multiple private IP addresses on your LAN (or DMZ).
The following example allows access from the WAN to an HTTP (web) server on the DMZ. The server has a
private IP address of 10.0.0.20.
2Specify an IP address and subnet mask for the
DMZ interface.
If you use private IP addresses on the DMZ,
use NAT to make the servers publicly
accessible (see Section 6).
A public IP address must be on a separate
subnet from the WAN port’s public IP address.
If you do not configure NAT for the public IP
addresses on the DMZ, the ZyWALL routes
traffic to the public IP addresses on the DMZ
without performing NAT. This may be useful for
hosting servers for NAT unfriendly
applications.
3Click Apply.