ZyXEL Communications ZyWALL USG 100 Series User manual

www.zyxel.com
Unified Security Gateway
Firmware v2.11
Edition 1, 11/2008
DEFAULT LOGIN DETAILS
IP Address: https://192.168.1.1
Username: admin
Password: 1234
CONTENTS
ENGLISH 3
DEUTSCH 19
ESPAÑOL 37
FRANÇAIS 53
ITALIANO 69
РУССКИЙ 85
简体中文 101
繁體中文 115
QUICK START GUIDE
ZyWALL USG 100
ZyWALL USG 200
Copyright 2008 ZyXEL Communications Corporation
C

2
Front and Rear Panels
USG 100
USG 200
SYS CARD
PWR AUX
USB 1-2 P1 - P7
AUX CONSOLE EXTENSION
CARD SLOT
POWER
AUX CONSOLE EXTENSION
CARD SLOT
POWER
PWR AUX
SYS CARD USB 1-2 P1 - P7
RESET
RESET

ENGLISH
3
ENGLISH
Checking the Package Contents
Your package should include one of each of the following:
• ZyWALL
• Power cord
• Rack-mounting kit
• RJ-45 Ethernet cable
• RS-232 console Y-cable
• Printed Quick Start
Guide
• Compact
disk (CD)

4
Rack-mounted Installation
Mount the ZyWALL in a 19-inch rack or place it on a sturdy, flat surface.
Leave 10 cm of clearance at the sides and 20 cm in the rear.
1. Align one bracket with the holes on one side of the ZyWALL and
secure it with the included bracket screws. Similarly, attach the other
bracket.
2. After attaching both mounting brackets, position the ZyWALL in the
rack by lining up the holes in the brackets with the appropriate holes
on the rack. Secure the ZyWALL to the rack with the rack-mounting
screws.
.

ENGLISH
5
Connecting the Hardware
1. It is recommended that you configure the ZyWALL before using it to
protect your network. Use an Ethernet cable to connect a computer to
port P4.
2. Use another Ethernet cable(s) to connect port 1 and/or port 2to an
Ethernet jack with Internet access.
3. Use the included power adaptor to connect the power socket (on the
rear panel) to a power outlet.

6
4. Look at the front panel. The PWR light turns on. The SYS light blinks
during system testing and initialization and then stays on when the
system is ready.

ENGLISH
7
Web Login
1. Launch your web browser
and go to http://192.168.1.1
(the ZyWALL automatically
redirects you to https://
192.168.1.1).
2. Click Yes to proceed if
you get a security alert
or certificate screen.

8
3. Enter admin as
the user name
and 1234 as the
password. Click
Login.
4. It is strongly recommended
that you change the
password. Type and retype
a new password, and click
Apply.

ENGLISH
9
Installation Setup Wizard
Use an installation setup wizard to connect to the Internet and register
the ZyWALL and/or activate trial services, like IDP and content filter.
Use the installation wizard only for initial configuration starting
from the default configuration.
The Status screen opens. Click the Wizard icon in the upper right
corner.

10
Changes you make in the installation wizard may not be applied if you
have already changed the ZyWALL’s configuration.
• INSTALLATION
SETUP, ONE ISP
sets up a single
Internet
connection for
wan1.
• INSTALLATION SETUP, TWO ISP sets up Internet connections for
wan1 and wan2.
The wizard screens vary
depending on the
encapsulation type you use.
Refer to information
provided by your ISP and
the web help screens to
know what to enter in each
field. You can leave fields
blank if you don’t have that
information.

ENGLISH
11
Default Settings and Port Details
The ZyWALL is configured for the following network topology by default.
(ZyWALL USG 200)

12
ZyWALL USG 200
Port Interfa
ce Zone IP Address and DHCP Settings
Suggested Use With
Default Settings
P1, P2 wan1,
wan2
WAN DHCP clients Connections to the
Internet
P3 opt OPT None, DHCP server
disabled
Third WAN, additional
LAN, WLAN, or DMZ port
or a separate network.
P4 lan1 LAN1 192.168.1.1, DHCP
server enabled
Protected LAN
P5 lan2 LAN2 192.168.2.1, DHCP
server enabled
Protected LAN
P6 ext-wlan WLAN 10.59.0.1, DHCP
server enabled
Wireless access points
P7 dmz DMZ 192.168.3.1, DHCP
server disabled
Public servers (such as
web, e-mail and FTP)
AUX aux None None Auxiliary modem
CONSOL
E
n/a None None Local management

ENGLISH
13
ZyWALL USG 100
Port Interfa
ce Zone IP Address and DHCP Settings
Suggested Use
With Default
Settings
P1, P2 wan1,
wan2
WAN DHCP clients Connections to the
Internet
P3, P4 lan1 LAN1 192.168.1.1, DHCP
server enabled
Protected LAN
P5 lan2 LAN2 192.168.2.1, DHCP
server enabled
Protected LAN
P6 ext-wlan WLAN 10.59.0.1, DHCP
server enabled
Wireless access points
P7 dmz DMZ 192.168.3.1, DHCP
server enabled
Public servers (such as
web, e-mail and FTP)
AUX aux None None Auxiliary modem
CONSOLE n/a None None Local management

14
Label Type Description
USB USB Connect a (USB) 3G wireless card to access the Internet
through a 3G network. At the time of writing, you can use
the Huawei E220, E270.
P1~P7 RJ-45 Use 8-wire Category 5e or above Ethernet cables to connect
routers, switches, computers, routers, access points, and so
on.
AUX RS-232 Use an RS-232 console cable to connect dial backup/dial-in
modem.
CONSOLE RS-232 Use an RS-232 console cable to connect a local computer
for command-based management.
EXTENSIO
N CARD
SLOT
PCMCI
A
Insert a wireless LAN card to use the wireless LAN feature.
At the time of writing, you can use ZyXEL’s G-170S wireless
card. You can optionally insert a 3G wireless card to access
the Internet wirelessly via a 3G network. At the time of
writing, you can use a Sierra Wireless AC850, AC860,
AC880 or AC881 3G wireless card.

ENGLISH
15
Troubleshooting
Problem Corrective Action
None of the
LEDs turn on.
Make sure that you have the power cord connected to the
ZyWALL and plugged in to an appropriate power source. Make
sure you have the ZyWALL turned on. Check all cable
connections.
If the LEDs still do not turn on, you may have a hardware problem.
In this case, you should contact your local vendor.

16
Cannot access
the ZyWALL from
the LAN.
Check the cable connection between the ZyWALL and your
computer or switch. Refer to section for details.
Ping the ZyWALL from a LAN computer. Make sure your
computer’s Ethernet card is installed and functioning properly.
Also make sure that its IP address is in the same subnet as the
ZyWALL’s.
In the computer, click Start, (All) Programs, Accessories and
then Command Prompt. In the Command Prompt window, type
"ping" followed by the ZyWALL’s LAN IP address (192.168.1.1 is
the default) and then press [ENTER]. The ZyWALL should reply.
If you’ve forgotten the ZyWALL’s password, use the RESET
button. Press the button in for about 5 seconds (or until the PWR
LED starts to blink), then release it. It returns the ZyWALL to the
factory defaults (password is 1234, LAN IP address 192.168.1.1
etc.; see your User’s Guide for details).
If you’ve forgotten the ZyWALL’s IP address, you can use the
commands through the console port to check it. Connect your
computer to the CONSOLE port using a console cable. Your
computer should have a terminal emulation communications
program (such as HyperTerminal) set to VT100 terminal
emulation, no parity, 8 data bits, 1 stop bit, no flow control and
115200 bps port speed.
Cannot access
the Internet.
Check the ZyWALL’s connection to the Ethernet jack with Internet
access. Make sure the Internet gateway device (such as a DSL
modem) is working properly.
Check the WAN port’s status in the Status screen. Use the
installation setup wizard again and make sure that you enter the
correct settings.
Problem Corrective Action

ENGLISH
17
Procedure to View a Product’s
Certification(s)
1. Go to www.zyxel.com.
2. Select your product from the drop-down list box on the ZyXEL home
page to go to that product's page.
3. Select the certification you wish to view from this page.

18

DEUTSCH
19
DEUTSCH
Prüfen des Packungsinhalts
Prüfen Sie ob alle Teile vorhanden sind:
• ZyWALL
• Netzkabel
• Rackmontage-
Zubehör
• RJ-45-Ethernetkabel
• Y-Kabel für RS-232-
Konsole
• Kurzanleitung in
Druckform
• CD

20
Rackmontage
Montieren Sie die ZyWALL in einem 19"-Rack oder stellen Sie es auf
eine stabile Unterlage.
Lassen Sie seitlich 10 cm und hinten 20 cm Platz.
1. Richten Sie eine Halterung an den Löchern an der Seite der ZyWALL
aus und schrauben Sie sie mit den mitgelieferten Montageschrauben
fest. Verfahren Sie ebenso mit der zweiten Halterung.