ZyXEL Communications ZyXEL ZyWALL USG-1000 User manual

www.zyxel.com
QUICK START GUIDE
Unified Security Gateway
Firmware v2.11
Edition 1, 11/2008
DEFAULT LOGIN DETAILS
IP Address: https://192.168.1.1
Username: admin
Password: 1234
CONTENTS
ENGLISH 3
DEUTSCH 17
ESPAÑOL 31
FRANÇAIS 45
ITALIANO 59
日本語 73
РУССКИЙ 87
简体中文 101
繁體中文 115
Copyright 2008 ZyXEL Communications Corporation
C
ZyWALL USG-1000

2
Front and Rear Panels
PWR
SYS HDD
AUX
RESET
ON/OFF
P1 - P5 USB1
USB2
FANS
POWER
SOCKET
AUX CONSOLE
EXTENSION
CARD SLOT
HDD SLOT

ENGLISH
3
ENGLISH
Checking the Package Contents
Your package
should include
one of each of
the following:
• ZyWALL
• Power cord
• Rack-
mounting
kit
• RJ-45
Ethernet
cable
• RS-232
console Y-
cable
• Printed
Quick Start
Guide
• Configuration
Reference
Card
• Compact disk
(CD)

4
Rack-mounted Installation
Mount the ZyWALL in a 19-inch rack or place it on a sturdy, flat surface.
Leave 10 cm of clearance at the sides and 20 cm in the rear.
1. Align one bracket with the holes on one side of the ZyWALL and
secure it with the included bracket screws. Similarly, attach the other
bracket.
2. After attaching both mounting brackets, position the ZyWALL in the
rack by lining up the holes in the brackets with the appropriate holes
on the rack. Secure the ZyWALL to the rack with the rack-mounting
screws.

ENGLISH
5
Connecting the Hardware
Make sure that the power switch on the rear panel is turned off before
you make the hardware connections.
Internet
2
5
1
1. It is recommended that you configure the ZyWALL before using it to
protect your network. Use an Ethernet cable to connect a computer to
port 1.
2. Use another Ethernet cable(s) to connect port 2 and/or port 3to an
Ethernet jack with Internet access.
3. Use the included power cord to connect the power socket on the rear
panel to a power outlet.

6
4. Push the power switch to the on position and look at the front panel.
The PWR light turns on. The SYS light blinks during system testing
and initialization and then stays on when the system is ready.

ENGLISH
7
Web Login
1. Launch your web browser and go to http://192.168.1.1 (the ZyWALL
automatically redirects you to https://192.168.1.1).
2. Click Yes to proceed if you get a security alert or certificate screen.

8
3. Enter admin as the user name and 1234 as the password. Click
Login.
4. It is strongly recommended that you change the password. Type and
retype a new password, and click Apply.

ENGLISH
9
Installation Setup Wizard
The Status screen opens. Click the Wizard icon in the upper right
corner.
Use an installation setup wizard to connect to the Internet and register
the ZyWALL and/or activate trial services, like IDP and content filter.
Use the installation wizard only for initial configuration starting
from the default configuration.

The wizard screens
vary depending on the
encapsulation type you
use. Refer to
information provided by
your ISP and the web
help screens to know
what to enter in each
field. You can leave
fields blank if you don’t
have that information.
10
Changes you make in the installation wizard may not be applied if you
have already changed the ZyWALL’s configuration.
• INSTALLATION SETUP, ONE ISP sets up a single Internet
connection for ge2.
• INSTALLATION SETUP, TWO ISP sets up Internet connections
for ge2 and ge3.

ENGLISH
11
Default Settings and Port Details
The ZyWALL is configured for the following network topology by default.
Port Interfa
ce Zone IP Address and DHCP Settings
Suggested Use With
Default Settings
P1 ge1 LAN 192.168.1.1, DHCP
server enabled
Protected LAN
P2, P3 ge2, ge3 WAN DHCP clients Connections to the Internet
P4 ge4 DMZ 192.168.2.1, DHCP
server disabled
Public servers (such as web,
e-mail and FTP)

12
The hard disk slot is reserved for future use.
P5 ge5 DMZ 192.68.3.1, DHCP
server disabled
Public servers (such as web,
e-mail and FTP)
AUX aux None None Auxiliary modem
CONSO
LE
N/A None None Local management
Label Type Description
USB USB Connect a (USB) 3G wireless card to access the Internet
through a 3G network. At the time of writing, you can use
the Huawei E220, E270.
P1~P5 RJ-45 Use 8-wire Category 5e or above Ethernet cables to connect
routers, switches, computers, routers, access points, and so
on.
AUX RS-232 Use an RS-232 console cable to connect dial backup/dial-in
modem.
CONSOLE RS-232 Use an RS-232 console cable to connect a local computer
for command-based management.
EXTENSIO
N CARD
SLOT
PCMCI
A
Insert a wireless LAN card to use the wireless LAN feature.
At the time of writing, you can use ZyXEL’s G-170S wireless
card. You can optionally insert a 3G wireless card to access
the Internet wirelessly via a 3G network. At the time of
writing, you can use a Sierra Wireless AC850, AC860,
AC880 or AC881 3G wireless card.
Port Interfa
ce Zone IP Address and DHCP Settings
Suggested Use With
Default Settings

ENGLISH
13
Troubleshooting
Problem Corrective Action
None of the LEDs
turn on.
Make sure that you have the power cord connected to the
ZyWALL and plugged in to an appropriate power source. Make
sure you have the ZyWALL turned on. Check all cable
connections.
If the LEDs still do not turn on, you may have a hardware
problem. In this case, you should contact your local vendor.

14
Cannot access the
ZyWALL from the
LAN.
Check the cable connection between the ZyWALL and your
computer or switch. Refer to section for details.
Ping the ZyWALL from a LAN computer. Make sure your
computer’s Ethernet card is installed and functioning properly.
Also make sure that its IP address is in the same subnet as the
ZyWALL’s.
In the computer, click Start, (All) Programs, Accessories and
then Command Prompt. In the Command Prompt window,
type "ping" followed by the ZyWALL’s LAN IP address
(192.168.1.1 is the default) and then press [ENTER]. The
ZyWALL should reply.
If you’ve forgotten the ZyWALL’s password, use the RESET
button. Press the button in for about 5 seconds (or until the PWR
LED starts to blink), then release it. It returns the ZyWALL to the
factory defaults (password is 1234, LAN IP address 192.168.1.1
etc.; see your User’s Guide for details).
If you’ve forgotten the ZyWALL’s IP address, you can use the
commands through the console port to check it. Connect your
computer to the CONSOLE port using a console cable. Your
computer should have a terminal emulation communications
program (such as HyperTerminal) set to VT100 terminal
emulation, no parity, 8 data bits, 1 stop bit, no flow control and
115200 bps port speed.
Cannot access the
Internet.
Check the ZyWALL’s connection to the Ethernet jack with
Internet access. Make sure the Internet gateway device (such as
a DSL modem) is working properly.
Check ge2’s status in the Status screen. Use the installation
setup wizard again and make sure that you enter the correct
settings.
Problem Corrective Action

ENGLISH
15
Procedure to View a Product’s
Certification(s)
1. Go to www.zyxel.com.
2. Select your product from the drop-down list box on the ZyXEL home
page to go to that product's page.
3. Select the certification you wish to view from this page.

16

DEUTSCH
17
DEUTSCH
Prüfen des Packungsinhalts
Prüfen Sie ob
alle Teile
vorhanden sind:
• ZyWALL
• Netzkabel
• Rackmonta
ge-
Zubehör
• RJ-45-
Ethernetka
bel
• Y-Kabel für
RS-232-
Konsole
• Kurzanleitu
ng in
Druckform
• Konfigurati
onskarte
• CD

18
Rackmontage
Montieren Sie die ZyWALL an einem 19"-Rack oder stellen Sie es auf
eine stabile Unterlage.
Lassen Sie seitlich 10 cm und hinten 20 cm Platz.
1. Richten Sie eine Halterung an den Löchern an der Seite der ZyWALL
aus und schrauben Sie sie mit den mitgelieferten Montageschrauben
fest. Verfahren Sie ebenso mit der zweiten Halterung.
2. Wenn Sie beide Montagehalterungen befestigt haben, richten Sie die
ZyWALL im so im Rack aus, dass die entsprechenden Schraublöcher
übereinander stehen. Befestigen Sie den ZyWALL mit den
Befestigungsschrauben am Rack.

DEUTSCH
19
Anschließen der Hardware
Stellen Sie sicher, dass der Netzschalter an der Rückseite des Geräts
ausgeschaltet ist, bevor Sie die ZyWALL in Betrieb nehmen.
Internet
2
5
1
1. Es wird empfohlen, die ZyWALL zu konfigurieren, bevor Sie sie zum
in Ihrem Netzwerk einsetzen. Schließen Sie einen Computer mit
einem Ethernetkabel an Port 1 an.
2. Schließen Sie an Port 2 und/oder Port 3Ihren Router mit
Internetzugriff an.
3. Schliessen Sie den Netzanschluss des Geräts (an der Rückseite) mit
dem mitgelieferten Netzkabel an eine Netzsteckdose an.

20
4. Schalten Sie den Ein/Aus-Schalter in die Position On und sehen Sie
sich das vordere Bedienfeld an. Die PWR-LED beginnt zu leuchten.
Die SYS-LED blinkt während des Systemtests und der Initialisierung,
und sie leuchtet, wenn der Test abgeschlossen und das System
bereit ist.