ZyXEL Communications ZyXEL ZyWALL 10W User manual

ZyWALL 10W
Internet Security Gateway
Quick Start Guide
Version 3.60
December 2002

ZyWALL 10W Internet Security Gateway
2
Use a Y-cable to connect
your administration
computer or a modem
(with a cable converter)
to the CON/AUX port.
Make sure the CON/AUX
switch is pushed to the
appropriate side.
Hardware Installation
Rear Panel and Connections
The Front Panel
Refer to the User’s Guide for LED descriptions.
The PWR and CON/AUX LEDs turn on.
The SYS LED blinks and turns steady on.
The SYS LED turns red if power is too low.
The LAN, WAN and WLAN LEDs turn on, if
they are properly connected.
Reset to
default
configuration
file. See User’s
Guide.
Connect to a computer/hub
using a straight-through/
crossover Ethernet cable.
The computer must have
Ethernet NIC (Network
Interface Card) installed.
Turn off your ZyWALL.
Remove the protective
cover plate from the slot
and insert an optional
PCMCIA wireless LAN
card into the slot.
Never force, bend or twist
the wireless LAN card
into the slot.
The wireless LAN is
disabled by default.
The ZyWALL wireless
LAN may not work if you
do not use ZyAIR
wireless PC cards.
Connect to
your cable/DSL
modem.
Connect a
grounded
wire to
ground the
ZyWALL.
Do this last. Connect to a power source
using the supplied power adapter.

ZyWALL 10W Internet Security Gateway
3
Internet Account Checklist
Your ISP (Internet Service Provider) should have given you most of the following information. You do not
need to fill in every blank.
REQUIRED INFORMATION
Your device’s WAN IP Address (if given): __________________
DNS Server IP Address (if given): Primary __________________, Secondary _________________
Encapsulation:
Ethernet Service Type: _______________________
Login Server IP Address: ______________
User Name: ____________ Password: ____________
PPTP User Name: ____________ Password: ____________
Your WAN IP Address: ____________ PPTP Server IP Address: ___________
Connection ID (if required): ____________
PPPoE (PPPoE) Service Name: ____________
User Name: ____________ Password: ____________
Setting Up Your Computer IP Address
Skip this section if your computer is already set up to accept a dynamic IP
address. This is the default for most new computers.
Your computer must have a 10M/100M NIC (Network Interface Card) and TCP/IP installed. TCP/IP should
already be installed on computers using Windows NT/2000/XP, Macintosh OS 7 and later operating
systems.
Windows 2000/NT/XP
1. In Windows XP, click start, Control Panel. In Windows 2000/NT, click Start, Settings, Control
Panel.
2. In Windows XP, click Network Connections.
In Windows 2000/NT, click Network and Dial-up Connections.
3. Right-click Local Area Connection and then click Properties.
4. Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and click Properties.

ZyWALL 10W Internet Security Gateway
4
5. The Internet Protocol TCP/IP Properties screen opens (the General tab in Windows XP).
-To have your computer accept a dynamic IP address, click Obtain an IP address automatically.
-If you want a static IP address, click Use the following IP Address and fill in the IP address
(192.168.1.2 to 192.168.1.254), Subnet mask (255.255.255.0), and Default gateway
(192.168.1.1) fields.
6. Click Advanced. Remove any previously installed gateways in the IP Settings tab and click OK to
go back to the Internet Protocol TCP/IP Properties screen.
7. Click Obtain DNS server address automatically if you do not know your DNS server IP
address(es).
If you know your DNS server IP address(es), click Use the following DNS server addresses,
and type them in the Preferred DNS server and Alternate DNS server fields.
If you have more than two DNS servers, click Advanced, DNS and click Add.
8. Click OK to close the Internet Protocol (TCP/IP) Properties window.
9. Click OK to close the Local Area Connection Properties window.
Checking/Modifying Your Computer’s IP Address
1. In the computer, click Start, (All) Programs, Accessories and then Command Prompt.
2. In the Command Prompt window, type "ipconfig" and then press ENTER to verify that your
computer’s static IP address is in the correct subnet (192.168.1.2 to 192.168.1.254 if using the default
ZyWALL LAN IP address). Alternatively, to have the ZyWALL assign your computer a new IP address
(from the IP pool), make sure your ZyWALL is turned on, type "ipconfig/renew" and then press
ENTER.
Your computer can now communicate with the ZyWALL using the LAN port.
Refer to your User’s Guide for detailed IP address configuration for other computer operating systems.
Accessing Your ZyWALL
Configure your ZyWALL using:
 Web Configurator
 SMT (System Management Terminal). Access the SMT via:
o LAN or WAN using Telnet
o Console port using terminal emulation software

ZyWALL 10W Internet Security Gateway
5
Procedure For Web Configurator Configuration
1. Make sure your computer IP address and
the ZyWALL IP address are on the same
subnet. Refer to the TCP/IP section in your
User’s Guide.
2. Launch your web browser and enter
“192.168.1.1” as the URL.
3. Enter "1234" (default) as the password and
click Login. In some versions, the default
password appears automatically - if this is
the case, just click Login. You should see a
screen asking you to change your password
(highly recommended).
4. Either enter a new password (and retype it
to confirm) and click Login or click Ignore.
You should now see the MAIN MENU screen.
Click the help icon (located in the upper right
portion of most screens) for online HTML help.
Procedure For SMT Configuration via Console Port
Configure a terminal emulation communications
program as follows: VT100 terminal emulation,
no parity, 8 data bits, 1 stop bit, data flow set to
none, 9600 bps port speed. Press ENTER to
display the SMT password screen.
Procedure For SMT Configuration via Telnet
Launch a Telnet program. In Windows, click
Start and then Run. Type “Telnet” followed by a
space and the IP address of the ZyWALL,
(192.168.1.1 is the default) and click OK to
display the password screen.
Enter the password (1234 is the default), to
access the SMT main menu.
Copyright (c) 1994 - 2002 ZyXEL Communications Corp.
ZyWALL 10W Main Menu
Getting Started Advanced Management
1. General Setup 21. Filter and Firewall Setup
2. WAN Setup 22. SNMP Configuration
3. LAN Setup 23. System Password
4. Internet Access Setup 24. System Maintenance
26. Schedule Setup
27. VPN/IPSec Setup
Advanced Applications
11. Remote Node Setup
12. Static Routing Setup
15. NAT Setup
99. Exit
Enter Menu Selection Number:

ZyWALL 10W Internet Security Gateway
6
Configuring for Internet Access
Configuration Using Web Configurator Wizard
1. Click Wizard Setup in the main menu. Follow
the online instructions to configure the first
wizard setup screen and click Next.
2. Use the information in the previous Required
Information table to enter the related fields in
the following screen and click Next.
3. In the following screen, repeat step 2 and click
Finish to complete the wizard setup.
Configuration Using SMT Menu 4
1. Enter 4 in the main menu and press ENTER to
display Menu 4 – Internet Access Setup.
2. Use the information in the previous Required
Information table to fill in related fields in the
SMT screen shown.
Menu 4 - Internet Access Setup
ISP's Name= ChangeMe
Encapsulation= Ethernet
Service Type= Standard
My Login= N/A
My Password= N/A
Login Server= N/A
IP Address Assignment= Dynamic
IP Address= N/A
IP Subnet Mask= N/A
Gateway IP Address= N/A
Network Address Translation= SUA Only
Press ENTER to Confirm or ESC to Cancel:
Press ENTER at the “Press ENTER to Confirm or ESC to
Cancel:” prompt to save your settings.

ZyWALL 10W Internet Security Gateway
7
Activating the Wireless LAN
The wireless LAN is disabled by default. Before you enable the wireless LAN you should configure some
security, for example, setting MAC address filters and/or 802.1X security; otherwise your LAN will be
vulnerable upon enabling it.
Setting MAC filters
Using the SMT Using the Web Configurator
1.
2.
Type 3 in the main menu and press ENTER.
Type 5 in Menu 3 – LAN Setup and press
ENTER. Refer to the User’s Guide to set up
MAC address filters.
1.
2.
Click ADVANCED in the main menu and then
WIRELESS LAN.
Click the MAC Filter tab. Follow the on-line
help to set up MAC filters.
Setting 802.1X Security Using the Web Configurator
Follow the on-line help to set up 802.1X security using the WIRELESS LAN screens.
Enable the Wireless LAN
Using SMT Menu 3.5 Using the Web Configurator
Press SPACE BAR to select Yes in the Enable
Wireless LAN field and press ENTER.
Refer to the User’s Guide to enable WEP and
set up WEP keys.
Menu 3.5 - Wireless LAN Setup
Enable Wireless LAN= Yes
ESSID= Wireless
Hide ESSID= No
Channel ID= CH01 2412MHz
RTS Threshold= 2432
Frag. Threshold= 2432
WEP= Disable
Default Key= N/A
Key1= N/A
Key2= N/A
Key3= N/A
Key4= N/A
Edit MAC Address Filter= No
Press ENTER to Confirm or ESC to Cancel:
Select the checkbox
to activate wireless
LAN.
Follow the on-line help
to enable WEP and set
up WEP keys.
Click Apply.

ZyWALL 10W Internet Security Gateway
8
Troubleshooting
PROBLEM CORRECTIVE ACTION
None of the LEDs turn
on when you turn on the
ZyWALL.
Make sure that you have the correct power adapter connected to the ZyWALL and plugged
in to an appropriate power source.
If the error persists, you may have a hardware problem. In this case, you should contact
your local vendor.
Cannot access the
ZyWALL from the LAN.
Check the cable connection between the ZyWALL and your computer or hub. Refer to the
Rear Panel and Connections section for details.
Make sure your NIC (Network Interface Card) is installed and functioning properly.
Cannot ping any
computer on the LAN.
If the 10/100M LAN LEDs are off, check the cable connection between the ZyWALL and
your computer or hub.
Verify that the IP address and the subnet mask of the ZyWALL and the computers are on
the same subnet.
The WAN IP is provided after the ISP verifies the MAC address, host name or user ID.
Find out the verification method used by your ISP and configure the corresponding fields.
If the ISP checks the WAN MAC address, click MAINTENANCE and then DHCP Table to
display the ZyWALL 's WAN MAC address. Send it to the ISP.
If the ISP does not allow you to use a new MAC address, click ADVANCED, WAN and then
the MAC tab. Clone the MAC from the LAN as the WAN. ZyXEL recommends that you
configure this menu even if your ISP presently does not require MAC address
authentication.
If the ISP checks the host name, enter your computer’s name (refer to the Wizard Setup
section in the User’s Guide) in the System Name field in the first screen of the WIZARD
SETUP.
Cannot get a WAN IP
address from the ISP.
If the ISP checks the user ID, click ADVANCED, WAN and the ISP tab. Check your service
type, user name, and password.
Check the ZyWALL’s connection to the cable/xDSL device.
Check whether your cable/xDSL device requires a crossover or straight-through cable.
Cannot access the
Internet.
Click ADVANCED and then WAN and verify your settings.