ZyXEL Communications ZyWALL USG 2000 User manual

www.zyxel.com
QUICK START GUIDE
ZyWALL USG 2000
Unified Security Gateway
Firmware v2.11
Edition 1, 2/2009
DEFAULT LOGIN DETAILS
LAN Port: P1
IP Address: http://192.168.1.1
Username: admin
Password: 1234
CONTENTS
ENGLISH 3
DEUTSCH 17
ESPAÑOL 31
FRANÇAIS 45
ITALIANO 59
РУССКИЙ 75
简体中文 91
繁體中文 105
Copyright 2009ZyXEL Communications Corporation
C

2
Front and Rear Panels
PWR2
SYS HDD
CARD
SEM SLOT
CONSOLE P1 - P6 P7 P8
PWR 1 PWR 2
PWR1 AUX

ENGLISH
3
Checking the Package Contents
Your package should include one of each of the following:
• ZyWALL
• Power cords (2)
• Rack-mounting kit
• RJ-45 Ethernet cable
• RS-232 console Y-cable
• Printed Quick Start Guide
• Configuration Reference Card
• Compact disc (CD)
ENGLISH

4
Rack-mounted Installation
Mount the ZyWALL in a 19-inch rack or place it on a sturdy, flat surface.
Leave 10 cm of clearance at the sides and 20 cm in the rear.
1. Align one bracket with the holes on one side of the ZyWALL and
secure it with the included bracket screws. Similarly, attach the other
bracket.
2. After attaching both mounting brackets, position the ZyWALL in the
rack by lining up the holes in the brackets with the appropriate holes
on the rack. Secure the ZyWALL to the rack with the rack-mounting
screws.

ENGLISH
5
Connecting the Hardware
Make sure that the power switch on the rear panel is turned off before
you make the hardware connections.
1. It is recommended that you configure the ZyWALL before using it to
protect your network. Use an Ethernet cable to connect a computer to
port 1.
2. Use another Ethernet cable(s) to connect port 2 and/or port 3to an
Ethernet jack with Internet access.
Internet
2
5
1

6
3. The ZyWALL has two power modules. Use the included power cords
to connect the power sockets on the rear panel to power outlets. Use
two different power sources for greater reliability since either power
module is adequate to power the ZyWALL.
4. Push both power switches to the on position and look at the front
panel. The PWR1 and PWR2 lights turn on green. The SYS light
blinks during system testing and initialization and then stays on when
the system is ready.

ENGLISH
7
Web Login
1. Launch your web browser and go to http://192.168.1.1 (the ZyWALL
automatically redirects you to https://192.168.1.1).
2. Click Yes to proceed if you get a security alert or certificate screen.

8
3. Enter admin as the user name and 1234 as the password. Click
Login.

ENGLISH
9
Installation Setup Wizard
The Status screen opens. Click the Wizard icon in the upper right
corner.
Use an installation setup wizard to connect to the Internet and register
the ZyWALL and/or activate trial services, like IDP and content filter.
Use the installation wizard only for initial configuration starting
from the default configuration.
Changes you make in the installation wizard may not be applied if you
have already changed the ZyWALL’s configuration.
• INSTALLATION SETUP, ONE ISP sets up a single Internet
connection for ge2.
• INSTALLATION SETUP, TWO ISP sets up Internet connections for
ge2 and ge3.

10
The wizard screens vary depending on the encapsulation type you use.
Refer to information provided by your ISP and the web help screens to
know what to enter in each field. You can leave fields blank if you don’t
have that information.

ENGLISH
11
Default Settings and Port Details
The ZyWALL is configured for the following network topology by default.
Port Interface Zone IP Address and
DHCP Settings
Suggested Use With
Default Settings
P1 ge1 LAN 192.168.1.1, DHCP
server enabled
Protected LAN
P2, P3 ge2, ge3 WAN DHCP clients Connections to the Internet
P4~P6 ge4, ge5,
ge6
DMZ 192.168.2.1,
192.168.3.1,
192.168.4.1, DHCP
server disabled
Public servers (such as web,
e-mail and FTP)

12
The USB ports, extension card slots, and hard disk slot are
reserved for future use.
P7, P8 ge7, ge8 None None, DHCP server
disabled
These RJ-45 and SFP slot
pairs have no default settings.
Configure their IP address
and DHCP settings according
to your requirements. Add
them to the LAN, WAN, or
DMZ zone or create new
zones for them.
AUX aux None None Auxiliary modem
CONS
OLE
N/A None None Local management
Label Type Cable to Use
P1~P6 RJ-45 8-wire Category 5e or above Ethernet cable
P7~P8 RJ-45/
SFP
slot pair
These are dual-personality (combo) Gigabit ports. Each
port consists of an RJ-45 Ethernet connector and SFP
slot pair.
Use 8-wire Category 5e or above Ethernet cable with
the RJ-45 Ethernet ports.
Use optional SFP (mini-GBIC) transceivers with the
SFP slots. See your local vendor for details.
There are two physical connections, but the ZyWALL
can only use one at a time. If you connect both, the
ZyWALL uses whichever links up first. If an SFP
transceiver and the corresponding Gigabit port connect
at the same time, the ZyWALL uses the SFP
connection.
AUX, CONSOLE RS-232 RS-232
Port Interface Zone IP Address and
DHCP Settings
Suggested Use With
Default Settings

ENGLISH
13
Maximizing Throughput
The ZyWALL has one internal bus for ports P1-P7 and another for port
P8. To maximize the ZyWALL’s throughput, use P8 for your connection
with the most traffic.
The ZyWALL has a slot for adding an optional Security Extension
Module (SEM) to enhance the ZyWALL’s VPN and /or Unified Threat
Management (UTM) capabilities.
• The VPN module (SEM-VPN) increases the maximum VPN
throughput from 100 Mbps to 500 Mbps, the maximum number of
IPSec VPN tunnels from 1,000 to 2,000 and the maximum number
of SSL VPN users from 250 (with a license) to 750 (with a license).
• The UTM module (SEM-UTM) increases the maximum anti-virus
and IDP traffic throughput from 100 Mbps to 400 Mbps.
• The SEM-DUAL module provides the performance enhancements
of both the VPN and UTM modules.

14
Troubleshooting
Problem Corrective Action
None of the
LEDs turn on.
Make sure that you have both power cords connected to the
ZyWALL and plugged into appropriate power sources. Make sure
you have both of the ZyWALL’s power switches turned on. Check all
cable connections.
If the LEDs still do not turn on, you may have a hardware problem. In
this case, you should contact your local vendor.
There is an
audible alarm
and one of the
PWR lights is
red.
One of the power modules is not supplying power. Press the
BUZZER RESET button on the ZyWALL’s front panel to stop the
audible alarm.
Check the power connections. Make sure that you have both power
cords connected to the ZyWALL and plugged into appropriate power
sources. Also make sure you have the power sources and both of
the ZyWALL’s power switches turned on.
Replace the ZyWALL power module that has a red PWR light.

ENGLISH
15
Cannot access
the ZyWALL
from the LAN.
Check the cable connection between the ZyWALL and your
computer or switch. Refer to section for details.
Ping the ZyWALL from a LAN computer. Make sure your computer’s
Ethernet card is installed and functioning properly. Also make sure
that its IP address is in the same subnet as the ZyWALL’s.
In the computer, click Start, (All) Programs, Accessories and then
Command Prompt. In the Command Prompt window, type "ping"
followed by the ZyWALL’s LAN IP address (192.168.1.1 is the
default) and then press [ENTER]. The ZyWALL should reply.
If you’ve forgotten the ZyWALL’s password, use the RESET button.
Press the button in for about 5 seconds (or until the PWR LED starts
to blink), then release it. It returns the ZyWALL to the factory defaults
(password is 1234, LAN IP address 192.168.1.1 etc.; see your
User’s Guide for details).
If you’ve forgotten the ZyWALL’s IP address, you can use the
commands through the console port to check it. Connect your
computer to the CONSOLE port using a console cable. Your
computer should have a terminal emulation communications
program (such as HyperTerminal) set to VT100 terminal emulation,
no parity, 8 data bits, 1 stop bit, no flow control and 115200 bps port
speed.
Cannot access
the Internet.
Check the ZyWALL’s connection to the Ethernet jack with Internet
access. Make sure the Internet gateway device (such as a DSL
modem) is working properly.
Check ge2’s status in the Status screen. Use the installation setup
wizard again and make sure that you enter the correct settings.
Problem Corrective Action

16

DEUTSCH
17
Prüfen des Packungsinhalts
Prüfen Sie ob alle Teile vorhanden sind:
• ZyWALL
• Netzkabel (2)
• Rackmontage-Zubehör
• RJ-45-Ethernetkabel
• Y-Kabel für RS-232-Konsole
• Kurzanleitung in Druckform
• CD
DEUTSCH

18
Rackmontage
Montieren Sie die ZyWALL in einem 19"-Rack oder stellen Sie das Gerät
auf eine stabile Unterlage.
Lassen Sie seitlich 10 cm und hinten 20 cm Platz.
1. Richten Sie eine Halterung an den Löchern an der Seite der ZyWALL
aus und schrauben Sie sie mit den mitgelieferten Montageschrauben
fest. Verfahren Sie ebenso mit der zweiten Halterung.
2. Wenn Sie beide Montagehalterungen befestigt haben, richten Sie die
ZyWALL im so im Rack aus, dass die entsprechenden Schraublöcher
übereinander stehen. Befestigen Sie die ZyWALL mit den
Befestigungsschrauben am Rack.

DEUTSCH
19
Anschließen der Hardware
Stellen Sie sicher, dass der Netzschalter an der Rückseite des Geräts
ausgeschaltet ist, bevor Sie die ZyWALL in Betrieb nehmen.
1. Es wird empfohlen, die ZyWALL zu konfigurieren, bevor Sie sie in
Ihrem Netzwerk einsetzen. Schließen Sie einen Computer mit einem
Ethernetkabel an Port 1 an.
2. Schließen Sie an Port 2 und/oder Port 3Ihren Router mit
Internetzugriff an.
Internet
2
5
1

20
3. Der ZyWALL verfügt über zwei Strommodule. Schließen Sie die
mitgelieferten Netzkabel an die Netzanschlüsse auf der Rückseite
des Gerätes an und stecken Sie sie entsprechend in die
Netzwerkdosen. Für eine bessere Zuverlässigkeit sollten Sie zwei
verschiedene Stromquellen verwenden, da beide Strommodule die
ZyWALL mit Strom versorgen können.
4. Schalten Sie beide Ein/Aus-Schalter in die Position On, und
kontrollieren Sie den Systemstart mittels der LED-Anzeigen an der
Vorderseite. Die LED-Anzeigen PWR1 und PWR2 leuchten grün. Die
SYS-LED blinkt während des Systemtests und der Initialisierung, und
sie leuchtet, wenn der Test abgeschlossen und das System bereit ist.