ZyXEL Communications ZyXEL ZyWALL P1 User manual

ZyWALL P1
Internet Security Appliance
User’s Guide
Version 3.64
8/2005

ZyWALL P1 User’s Guide
Copyright 1
Copyright
Copyright © 2005 by ZyXEL Communications Corporation.
The contents of this publication may not be reproduced in any part or as a whole, transcribed,
stored in a retrieval system, translated into any language, or transmitted in any form or by any
means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or
otherwise, without the prior written permission of ZyXEL Communications Corporation.
Published by ZyXEL Communications Corporation. All rights reserved.
Disclaimer
ZyXEL does not assume any liability arising out of the application or use of any products, or
software described herein. Neither does it convey any license under its patent rights nor the
patent rights of others. ZyXEL further reserves the right to make changes in any products
described herein without notice. This publication is subject to change without notice.
Trademarks
ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL
Communications, Inc. Other trademarks mentioned in this publication are used for
identification purposes only and may be properties of their respective owners.

ZyWALL P1 User’s Guide
2 Federal Communications Commission (FCC) Interference Statement
Federal Communications
Commission (FCC) Interference
Statement
This device complies with Part 15 of FCC rules. Operation is subject to the following two
conditions:
• This device may not cause harmful interference.
• This device must accept any interference received, including interference that may cause
undesired operations.
This equipment has been tested and found to comply with the limits for a Class B digital
device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference in a commercial environment. This equipment
generates, uses, and can radiate radio frequency energy, and if not installed and used in
accordance with the instructions, may cause harmful interference to radio communications.
If this equipment does cause harmful interference to radio/television reception, which can be
determined by turning the equipment off and on, the user is encouraged to try to correct the
interference by one or more of the following measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and the receiver.
• Connect the equipment into an outlet on a circuit different from that to which the receiver
is connected.
• Consult the dealer or an experienced radio/TV technician for help.
Notice 1
Changes or modifications not expressly approved by the party responsible for compliance
could void the user's authority to operate the equipment.
Certifications
1Go to www.zyxel.com
2Select your product from the drop-down list box on the ZyXEL
home page to go to that product's page.
3Select the certification you wish to view from this page

ZyWALL P1 User’s Guide
Safety Warnings 3
Safety Warnings
For your safety, be sure to read and follow all warning notices and instructions.
• To reduce the risk of fire, use only No. 26 AWG (American Wire Gauge) or larger
telecommunication line cord.
• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel can
service the device. Please contact your vendor for further information.
• Use ONLY the dedicated power supply for your device. Connect the power cord or
power adaptor to the right supply voltage (110V AC in North America or 230V AC in
Europe).
• Do NOT use the device if the power supply is damaged as it might cause electrocution.
• If the power supply is damaged, remove it from the power outlet.
• Do NOT attempt to repair the power supply. Contact your local vendor to order a new
power supply.
• Place connecting cables carefully so that no one will step on them or stumble over them.
Do NOT allow anything to rest on the power cord and do NOT locate the product where
anyone can walk on the power cord.
• If you wall mount your device, make sure that no electrical, gas or water pipes will be
damaged.
• Do NOT install nor use your device during a thunderstorm. There may be a remote risk of
electric shock from lightning.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Make sure to connect the cables to the correct ports.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.
• Do NOT store things on the device.
• Connect ONLY suitable accessories to the device.

ZyWALL P1 User’s Guide
4ZyXEL Limited Warranty
ZyXEL Limited Warranty
ZyXEL warrants to the original end user (purchaser) that this product is free from any defects
in materials or workmanship for a period of up to two years from the date of purchase. During
the warranty period, and upon proof of purchase, should the product have indications of failure
due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the
defective products or components without charge for either parts or labor, and to whatever
extent it shall deem necessary to restore the product or components to proper operating
condition. Any replacement will consist of a new or re-manufactured functionally equivalent
product of equal value, and will be solely at the discretion of ZyXEL. This warranty shall not
apply if the product is modified, misused, tampered with, damaged by an act of God, or
subjected to abnormal working conditions.
Note
Repair or replacement, as provided under this warranty, is the exclusive remedy of the
purchaser. This warranty is in lieu of all other warranties, express or implied, including any
implied warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in
no event be held liable for indirect or consequential damages of any kind of character to the
purchaser.
To obtain the services of this warranty, contact ZyXEL's Service Center for your Return
Material Authorization number (RMA). Products must be returned Postage Prepaid. It is
recommended that the unit be insured when shipped. Any returned products without proof of
purchase or those with an out-dated warranty will be repaired or replaced (at the discretion of
ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced products
will be shipped by ZyXEL to the corresponding return address, Postage Paid. This warranty
gives you specific legal rights, and you may also have other rights that vary from country to
country.
Safety Warnings
For your safety, be sure to read and follow all warning notices and instructions.
• To reduce the risk of fire, use only No. 26 AWG (American Wire Gauge) or larger
telecommunication line cord.
• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel can
service the device. Please contact your vendor for further information.
• Use ONLY the dedicated power supply for your device. Connect the power cord or
power adaptor to the right supply voltage (110V AC in North America or 230V AC in
Europe).
• Do NOT use the device if the power supply is damaged as it might cause electrocution.
• If the power supply is damaged, remove it from the power outlet.
• Do NOT attempt to repair the power supply. Contact your local vendor to order a new
power supply.

ZyWALL P1 User’s Guide
ZyXEL Limited Warranty 5
• Place connecting cables carefully so that no one will step on them or stumble over them.
Do NOT allow anything to rest on the power cord and do NOT locate the product where
anyone can walk on the power cord.
• If you wall mount your device, make sure that no electrical, gas or water pipes will be
damaged.
• Do NOT install nor use your device during a thunderstorm. There may be a remote risk of
electric shock from lightning.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Make sure to connect the cables to the correct ports.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.
• Do NOT store things on the device.
• Connect ONLY suitable accessories to the device.

ZyWALL P1 User’s Guide
6Customer Support
Customer Support
Please have the following information ready when you contact customer support.
• Product model and serial number.
• Warranty Information.
• Date that you received your device.
• Brief description of the problem and the steps you took to solve it. .
METHOD
LOCATION
SUPPORT E-MAIL TELEPHONEAWEB SITE
REGULAR MAIL
SALES E-MAIL FAX FTP SITE
CORPORATE
HEADQUARTERS
(WORLDWIDE)
[email protected] [phone] www.zyxel.com
www.europe.zyxel.com
ZyXEL Communications Corp.
6 Innovation Road II
Science Park
Hsinchu 300
Ta i w a n
[email protected] [phone] ftp.zyxel.com
ftp.europe.zyxel.com
CZECH REPUBLIC
[email protected] [phone] www.zyxel.cz ZyXEL Communications
Czech s.r.o.
Modranská 621
143 01 Praha 4 - Modrany
Ceská Republika
[email protected] [phone]
DENMARK
[email protected] [phone] www.zyxel.dk ZyXELCommunicationsA/S
Columbus vej 5
2860 Soeborg
Denmark
[email protected] [phone]
FINLAND
[email protected] [phone] www.zyxel.fi ZyXEL Communications Oy
Malminka ari 1 0
00700 Helsinki
Finland
[email protected] [phone]
FRANCE
inf o @zy xel. fr +33 ( 0 )4 72 5 2 9 7 97 www. z yxe l .fr Zy X EL Fra n ce
1 rue d es Ve rg ers
Bat. 1 / C
69760 Limonest
France
[phone]
GERMANY
[email protected] [phone] www.zyxel.de ZyXEL Deutschland GmbH.
Adenauerstr. 20/A2 D-52146
Wuerselen
Germany
[email protected] [phone]
NORTH AMERICA
[email protected] [phone]
[phone]
www.us.zyxel.com ZyXEL Communications Inc.
1130 N. Miller St.
Anaheim
CA 92806-2001
U.S.A.
[email protected] [phone] ftp.us.zyxel.com
NORWAY
[email protected] [phone] www.zyxel.no ZyXELCommunicationsA/S
Nils Hansens vei 13
0667 Oslo
Norway
[email protected] [phone]
SPAIN
[email protected] [phone] www.zyxel.es ZyXEL Communications
Alejandro Villegas 33
1º,28043Madrid
Spain
[email protected] [phone]
SWEDEN
[email protected] [phone] www.zyxel.se ZyXEL Communications A/S
Sjöporten 4, 41764 Göteborg
Sweden
[email protected] [phone]

ZyWALL P1 User’s Guide
Customer Support 7
UNITED KINGDOM
[email protected] [phone]
08707 555779 (UK only)
www.zyxel.co.uk ZyXEL Communications UK
Ltd.,11 The Courtyard,
Eastern Road, Bracknell,
Berkshire, RG12 2XB,
United Kingdom (UK)
[email protected] [phone] ftp.zyxel.co.uk
a. “+” is the (prefix) number you enter to make an international telephone call.
METHOD
LOCATION
SUPPORT E-MAIL TELEPHONEAWEB SITE
REGULAR MAIL
SALES E-MAIL FAX FTP SITE

ZyWALL P1 User’s Guide
8Customer Support

ZyWALL P1 User’s Guide
Table of Contents 9
Table of Contents
Copyright .................................................................................................................. 1
Federal Communications Commission (FCC) Interference Statement ............... 2
Safety Warnings ....................................................................................................... 3
ZyXEL Limited Warranty.......................................................................................... 4
Customer Support.................................................................................................... 6
Preface .................................................................................................................... 29
Chapter 1
Getting to Know Your ZyWALL ............................................................................. 31
1.1 Overview ............................................................................................................31
1.2 ZyWALL Features ..............................................................................................31
1.2.1 Physical Features .....................................................................................31
1.2.2 Non-Physical Features .............................................................................32
1.3 Applications ........................................................................................................35
1.3.1 Secure Network Access for Telecommuters .............................................35
1.3.2 LAN Network Protection ..........................................................................35
1.4 ZyWALL Hardware Connection ..........................................................................36
1.5 Front Panel LED .................................................................................................36
Chapter 2
Introducing the Web Configurator........................................................................ 39
2.1 Overview ............................................................................................................39
2.2 Accessing the Web Configurator ........................................................................39
2.3 Resetting the ZyWALL .......................................................................................41
2.3.1 Procedure to Use the Reset Button ..........................................................42
2.4 Navigating the Web Configurator .......................................................................42
2.4.1 The HOME Screen ...................................................................................42
2.4.2 Navigation Panel .......................................................................................44
2.4.3 System Statistics .......................................................................................46
2.4.4 DHCP Table Screen .................................................................................47
2.4.5 VPN Status ...............................................................................................48

ZyWALL P1 User’s Guide
10 Table of Contents
Chapter 3
Wizard Setup .......................................................................................................... 51
3.1 Overview ............................................................................................................51
3.2 Internet Access Wizard Setup ...........................................................................51
3.2.1 ISP Parameters ........................................................................................51
3.2.2 WAN and DNS ..........................................................................................51
3.2.2.1 WAN IP Address Assignment ..........................................................51
3.2.2.2 IP Address and Subnet Mask ..........................................................52
3.2.2.3 DNS Server Address Assignment ...................................................52
3.2.2.4 Ethernet ...........................................................................................53
3.2.2.5 PPPoE Encapsulation .....................................................................54
3.2.2.6 PPTP Encapsulation .......................................................................56
3.2.3 Internet Access Wizard Setup Complete ..................................................58
3.3 VPN Wizard Setup .............................................................................................58
3.3.1 IPSec ........................................................................................................59
3.3.2 Security Association .................................................................................59
3.3.3 My IP Address ..........................................................................................59
3.3.4 Secure Gateway Address .........................................................................59
3.3.4.1 Dynamic Secure Gateway Address ................................................59
3.3.5 VPN Wizard: Gateway Policy Setting .......................................................59
3.3.6 VPN Wizard: Network Setting ...................................................................60
3.3.7 IKE Phases ...............................................................................................62
3.3.7.1 Negotiation Mode ............................................................................63
3.3.7.2 Pre-Shared Key ...............................................................................63
3.3.7.3 Diffie-Hellman (DH) Key Groups .....................................................63
3.3.7.4 Perfect Forward Secrecy (PFS) .....................................................64
3.4 IPSec Algorithms ................................................................................................64
3.4.1 AH (Authentication Header) Protocol ........................................................64
3.4.2 ESP (Encapsulating Security Payload) Protocol ......................................64
3.4.3 IKE Tunnel Setting (IKE Phase 1) ............................................................66
3.4.4 IPSec Setting (IKE Phase 2) .....................................................................67
3.4.5 VPN Status Summary ...............................................................................68
3.4.6 VPN Wizard Setup Complete ...................................................................70
Chapter 4
LAN Screens........................................................................................................... 73
4.1 LAN Overview ....................................................................................................73
4.2 DHCP Setup .......................................................................................................73
4.2.1 IP Pool Setup ............................................................................................73
4.2.2 DNS Servers .............................................................................................73
4.3 LAN TCP/IP ........................................................................................................74
4.3.1 Factory LAN Defaults ................................................................................74
4.3.2 IP Address and Subnet Mask ...................................................................74

ZyWALL P1 User’s Guide
Table of Contents 11
4.3.3 RIP Setup .................................................................................................74
4.3.4 Multicast ....................................................................................................75
4.4 Configuring LAN .................................................................................................75
4.5 Configuring Static DHCP ....................................................................................77
Chapter 5
WAN Screens.......................................................................................................... 79
5.1 WAN Overview ...................................................................................................79
5.1.1 TCP/IP Priority (Metric) .............................................................................79
5.1.2 WAN MAC Address ..................................................................................79
5.2 WAN Route Setup ..............................................................................................79
5.3 Configuring WAN Setup .....................................................................................80
5.3.1 Ethernet Encapsulation .............................................................................80
5.3.2 PPPoE Encapsulation ...............................................................................83
5.3.3 PPTP Encapsulation .................................................................................85
5.4 Dynamic DNS .....................................................................................................87
5.4.1 DYNDNS Wildcard ....................................................................................87
5.4.2 Configuring Dynamic DNS ........................................................................88
Chapter 6
Firewalls.................................................................................................................. 91
6.1 Firewall Overview ...............................................................................................91
6.2 Types of Firewalls ..............................................................................................91
6.2.1 Packet Filtering Firewalls ..........................................................................91
6.2.2 Application-level Firewalls ........................................................................91
6.2.3 Stateful Inspection Firewalls .....................................................................92
6.3 Introduction to ZyXEL’s Firewall .........................................................................92
6.4 Denial of Service ................................................................................................93
6.4.1 Basics .......................................................................................................93
6.4.2 Types of DoS Attacks ...............................................................................94
6.4.2.1 ICMP Vulnerability ..........................................................................96
6.4.2.2 Illegal Commands (NetBIOS and SMTP) ........................................96
6.4.2.3 Traceroute .......................................................................................97
6.5 Stateful Inspection ..............................................................................................97
6.5.1 Stateful Inspection Process ......................................................................98
6.5.2 Stateful Inspection and the ZyWALL .........................................................99
6.5.3 TCP Security .............................................................................................99
6.5.4 UDP/ICMP Security ................................................................................100
6.5.5 Upper Layer Protocols ............................................................................100
6.6 Guidelines For Enhancing Security With Your Firewall ....................................101
6.7 Packet Filtering Vs Firewall ..............................................................................101
6.7.1 Packet Filtering: ......................................................................................101
6.7.1.1 When To Use Filtering ...................................................................101

ZyWALL P1 User’s Guide
12 Table of Contents
6.7.2 Firewall ...................................................................................................102
6.7.2.1 When To Use The Firewall ............................................................102
Chapter 7
Firewall Screens................................................................................................... 103
7.1 Access Methods ...............................................................................................103
7.2 Firewall Policies Overview ...............................................................................103
7.3 Rule Logic Overview ........................................................................................104
7.3.1 Rule Checklist .........................................................................................104
7.3.2 Security Ramifications ............................................................................104
7.3.3 Key Fields For Configuring Rules ...........................................................105
7.3.3.1 Action ............................................................................................105
7.3.3.2 Service ..........................................................................................105
7.3.3.3 Source Address .............................................................................105
7.3.3.4 Destination Address ......................................................................105
7.4 Connection Direction Examples .......................................................................105
7.4.1 LAN To WAN Rules ................................................................................106
7.4.2 WAN To LAN Rules ................................................................................106
7.5 Alerts ................................................................................................................106
7.6 Configuring Firewall .........................................................................................107
7.6.1 Rule Summary ........................................................................................107
7.6.2 Configuring Firewall Rules ......................................................................109
7.6.3 Configuring Custom Services .................................................................112
7.7 Example Firewall Rule .....................................................................................112
7.8 Predefined Services .........................................................................................116
7.9 Anti-Probing .....................................................................................................118
7.10 Configuring Attack Alert .................................................................................119
7.10.1 Threshold Values ..................................................................................120
7.10.2 Half-Open Sessions ..............................................................................120
7.10.2.1 TCP Maximum Incomplete and Blocking Time ...........................120
Chapter 8
Introduction to IPSec ........................................................................................... 123
8.1 VPN Overview ..................................................................................................123
8.1.1 IPSec ......................................................................................................123
8.1.2 Security Association ...............................................................................123
8.1.3 Other Terminology ..................................................................................123
8.1.3.1 Encryption .....................................................................................123
8.1.3.2 Data Confidentiality .......................................................................124
8.1.3.3 Data Integrity .................................................................................124
8.1.3.4 Data Origin Authentication ............................................................124
8.1.4 VPN Applications ....................................................................................124
8.1.4.1 Linking Two or More Private Networks Together ...........................124

ZyWALL P1 User’s Guide
Table of Contents 13
8.1.4.2 Accessing Network Resources When NAT Is Enabled .................124
8.1.4.3 Unsupported IP Applications .........................................................124
8.2 IPSec Architecture ...........................................................................................125
8.2.1 IPSec Algorithms ....................................................................................125
8.2.2 Key Management ....................................................................................125
8.3 Encapsulation ...................................................................................................125
8.3.1 Transport Mode ......................................................................................126
8.3.2 Tunnel Mode ...........................................................................................126
8.4 IPSec and NAT .................................................................................................126
Chapter 9
VPN Screens......................................................................................................... 129
9.1 VPN/IPSec Overview .......................................................................................129
9.2 IPSec Algorithms ..............................................................................................129
9.2.1 AH (Authentication Header) Protocol ......................................................129
9.2.2 ESP (Encapsulating Security Payload) Protocol ....................................129
9.3 My ZyWALL ......................................................................................................130
9.4 Secure Gateway Address ................................................................................130
9.4.1 Dynamic Secure Gateway Address ........................................................131
9.4.2 Nailed Up ................................................................................................131
9.5 NAT Traversal ..................................................................................................131
9.5.1 NAT Traversal Configuration ...................................................................132
9.5.2 X-Auth (Extended Authentication) ..........................................................132
9.5.3 Authentication Server .............................................................................132
9.6 ID Type and Content ........................................................................................133
9.6.1 ID Type and Content Examples ..............................................................134
9.7 Pre-Shared Key ................................................................................................134
9.8 IKE VPN Rule Summary Screen ......................................................................135
9.8.1 Configurign an IKE VPN Rule .................................................................135
9.8.2 Configuring an IKE VPN Policy ...............................................................140
9.8.2.1 Activating a VPN Connection ........................................................144
9.9 Viewing SA Monitor ..........................................................................................144
9.10 Configuring Global Setting .............................................................................145
9.11 Telecommuter VPN/IPSec Examples .............................................................146
9.11.1 Telecommuters Sharing One VPN Rule Example .................................147
9.11.2 Telecommuters Using Unique VPN Rules Example .............................147
9.12 VPN and Remote Management .....................................................................149
Chapter 10
Certificates............................................................................................................ 151
10.1 Certificates Overview .....................................................................................151
10.1.1 Advantages of Certificates ....................................................................152
10.2 Self-signed Certificates ..................................................................................152

ZyWALL P1 User’s Guide
14 Table of Contents
10.3 Configuration Summary .................................................................................152
10.4 My Certificates ...............................................................................................152
10.5 Certificate File Formats ..................................................................................154
10.6 Importing a Certificate ....................................................................................155
10.7 Creating a Certificate .....................................................................................156
10.8 My Certificate Details .....................................................................................158
10.9 Trusted CAs ...................................................................................................161
10.10 Importing a Trusted CA’s Certificate .............................................................163
10.11 Trusted CA Certificate Details ......................................................................164
10.12 Trusted Remote Hosts .................................................................................167
10.13 Verifying a Trusted Remote Host’s Certificate ..............................................169
10.13.1 Trusted Remote Host Certificate Fingerprints .....................................169
10.14 Importing a Trusted Remote Host’s Certificate ............................................170
10.15 Trusted Remote Host Certificate Details ......................................................171
10.16 Directory Servers .........................................................................................174
10.17 Add or Edit a Directory Server .....................................................................175
Chapter 11
Network Address Translation (NAT) ................................................................... 177
11.1 NAT Overview .................................................................................................177
11.1.1 NAT Definitions .....................................................................................177
11.1.2 What NAT Does ....................................................................................178
11.1.3 How NAT Works ....................................................................................178
11.1.4 NAT Mapping Types ..............................................................................178
11.2 Using NAT ......................................................................................................179
11.2.1 SUA (Single User Account) Versus NAT ...............................................180
11.3 Configuring NAT Overview .............................................................................180
11.4 Port Forwarding ..............................................................................................181
11.4.1 Default Server IP Address ....................................................................181
11.4.2 Port Forwarding: Services and Port Numbers ......................................181
11.4.3 Configuring Servers Behind Port Forwarding (Example) ......................182
11.4.4 Port Translation .....................................................................................183
11.5 Configuring Port Forwarding .........................................................................183
11.6 Configuring Trigger Port .................................................................................185
Chapter 12
Static Route .......................................................................................................... 187
12.1 Static Route Overview ....................................................................................187
12.2 Configuring IP Static Route ............................................................................187
12.2.1 Configuring a Static Route Entry ...........................................................188

ZyWALL P1 User’s Guide
Table of Contents 15
Chapter 13
Remote Management ........................................................................................... 191
13.1 Remote Management Overview .....................................................................191
13.1.1 Remote Management Limitations .........................................................191
13.1.2 Remote Management and NAT ............................................................192
13.1.3 System Timeout ...................................................................................192
13.2 Introduction to HTTPS ....................................................................................192
13.3 Configuring WWW ..........................................................................................193
13.4 HTTPS Example ............................................................................................194
13.4.1 Internet Explorer Warning Messages ...................................................195
13.4.2 Netscape Navigator Warning Messages ...............................................195
13.4.3 Avoiding the Browser Warning Messages ............................................196
13.4.4 Login Screen .........................................................................................197
13.5 SSH Overview ................................................................................................200
13.6 How SSH works .............................................................................................200
13.7 SSH Implementation on the ZyWALL .............................................................201
13.7.1 Requirements for Using SSH ................................................................202
13.8 Configuring SSH ............................................................................................202
13.9 Secure Telnet Using SSH Examples ..............................................................203
13.9.1 Example 1: Microsoft Windows .............................................................203
13.9.2 Example 2: Linux ..................................................................................203
13.10 Secure FTP Using SSH Example ................................................................204
13.11 Telnet ............................................................................................................205
13.12 Configuring TELNET ....................................................................................205
13.13 Configuring FTP ...........................................................................................206
13.14 Configuring SNMP .......................................................................................207
13.14.1 Supported MIBs .................................................................................209
13.14.2 SNMP Traps .......................................................................................209
13.14.3 REMOTE MANAGEMENT: SNMP ......................................................209
13.15 Configuring DNS .......................................................................................... 211
13.16 Introducing Vantage CNM ............................................................................211
13.17 Configuring CNM ..........................................................................................212
Chapter 14
UPnP...................................................................................................................... 215
14.1 Universal Plug and Play Overview .................................................................215
14.1.1 How Do I Know If I'm Using UPnP? ......................................................215
14.1.2 NAT Traversal .......................................................................................215
14.1.3 Cautions with UPnP ..............................................................................215
14.2 UPnP and ZyXEL ...........................................................................................216
14.3 Configuring UPnP ..........................................................................................216
14.4 Displaying UPnP Port Mapping ......................................................................217
14.5 Installing UPnP in Windows Example ............................................................218

ZyWALL P1 User’s Guide
16 Table of Contents
14.5.1 Installing UPnP in Windows Me ............................................................219
14.5.2 Installing UPnP in Windows XP ............................................................220
14.6 Using UPnP in Windows XP Example ...........................................................220
14.6.1 Auto-discover Your UPnP-enabled Network Device .............................221
14.6.2 Web Configurator Easy Access ............................................................223
Chapter 15
Logs Screens........................................................................................................ 225
15.1 Configuring View Log .....................................................................................225
15.2 Log Description Example ...............................................................................226
15.3 Configuring Log Settings ................................................................................227
15.4 Configuring Reports .......................................................................................230
15.4.1 Viewing Web Site Hits ...........................................................................232
15.4.2 Viewing Protocol/Port ...........................................................................232
15.4.3 Viewing LAN IP Address .......................................................................233
15.4.4 Reports Specifications ..........................................................................234
Chapter 16
Maintenance ......................................................................................................... 235
16.1 Maintenance Overview ...................................................................................235
16.1.1 General Setup and System Name ........................................................235
16.1.2 Domain Name .......................................................................................235
16.2 Configuring Password ....................................................................................236
16.3 Pre-defined NTP Time Servers List ................................................................237
16.4 Configuring Time and Date ............................................................................238
16.4.1 Time Server Synchronization ................................................................240
16.5 F/W Upload Screen ........................................................................................241
16.6 Configuration Screen .....................................................................................243
16.6.1 Backup Configuration ...........................................................................244
16.6.2 Restore Configuration ..........................................................................244
16.6.3 Back to Factory Defaults .......................................................................246
16.7 Restart Screen ...............................................................................................246
Chapter 17
Firmware and Configuration File Maintenance ................................................. 249
17.1 Introduction ....................................................................................................249
17.2 Filename Conventions ...................................................................................249
17.3 Backup Configuration .....................................................................................250
17.3.1 Using the FTP Command from the Command Line ..............................250
17.3.2 GUI-based FTP Clients .........................................................................251
17.3.3 File Maintenance Over WAN ................................................................251
17.3.4 Backup Configuration Using TFTP .......................................................252
17.3.5 TFTP Command Example ....................................................................252

ZyWALL P1 User’s Guide
Table of Contents 17
17.3.6 GUI-based TFTP Clients ......................................................................253
17.4 Restore Configuration ....................................................................................253
17.4.1 Restore Using FTP ...............................................................................253
17.4.2 Restore Using FTP Session Example ..................................................254
17.5 Uploading Firmware and Configuration Files .................................................254
17.5.1 Firmware File Upload ............................................................................254
17.5.2 FTP File Upload Command from the Command Prompt Example .......254
17.5.3 FTP Session Example of Firmware File Upload ...................................255
17.5.4 TFTP File Upload ..................................................................................255
17.5.5 TFTP Upload Command Example ........................................................256
Chapter 18
Troubleshooting ................................................................................................... 257
18.1 Problems Starting Up the ZyWALL .................................................................257
18.2 Problems Accessing the ZyWALL ..................................................................258
18.2.1 Pop-up Windows, JavaScripts and Java Permissions ..........................258
18.2.1.1 Internet Explorer Pop-up Blockers ..............................................258
18.2.1.2 JavaScripts ..................................................................................261
18.2.1.3 Java Permissions ........................................................................263
18.3 Problems with the LAN Interface ....................................................................265
18.4 Problems with the WAN Interface ..................................................................266
18.5 Problems with Internet Access .......................................................................266
18.6 Problems with the Password ..........................................................................266
18.7 Problems with Remote Management .............................................................267
Appendix A
Setting up Your Computer’s IP Address............................................................ 269
Appendix B
IP Subnetting ........................................................................................................ 281
Appendix C
PPPoE ................................................................................................................... 289
Appendix D
PPTP...................................................................................................................... 291
Appendix E
Triangle Route ...................................................................................................... 295
Appendix F
SIP Passthrough .................................................................................................. 299
Appendix G
VPN Setup............................................................................................................. 305

ZyWALL P1 User’s Guide
18 Table of Contents
Appendix H
Importing Certificates .......................................................................................... 317
Appendix I
Command Interpreter........................................................................................... 329
Appendix J
Firewall Commands ............................................................................................. 331
Appendix K
NetBIOS Filter Commands .................................................................................. 337
Appendix L
Certificates Commands ....................................................................................... 341
Appendix M
Brute-Force Password Guessing Protection..................................................... 345
Appendix N
Log Descriptions.................................................................................................. 347
Index...................................................................................................................... 363

ZyWALL P1 User’s Guide
List of Figures 19
List of Figures
Figure 1 Application: Telecommuters ................................................................................ 35
Figure 2 Application: LAN Network Protection ................................................................... 36
Figure 3 Front Panel: LEDs ................................................................................................ 36
Figure 4 Web Configurator: Initial Screen .......................................................................... 40
Figure 5 Web Configurator: Login Screen ........................................................................... 40
Figure 6 Change Password Screen .................................................................................... 41
Figure 7 Replace Certificate Screen ................................................................................... 41
Figure 8 Web Configurator: HOME ................................................................................... 43
Figure 9 Home : Show Statistics ......................................................................................... 47
Figure 10 Home: DHCP Table ............................................................................................. 48
Figure 11 Home : VPN Status ............................................................................................. 49
Figure 12 Internet Access Wizard: Ethernet Encapsulation ................................................ 53
Figure 13 Internet Access Wizard: PPPoE Encapsulation .................................................. 55
Figure 14 Internet Access Wizard: PPTP Encapsulation .................................................... 57
Figure 15 Internet Access Wizard: Complete ...................................................................... 58
Figure 16 VPN Wizard: Gateway Policy Setting ................................................................. 60
Figure 17 VPN Wizard: Network Setting ............................................................................. 61
Figure 18 Two Phases to Set Up the IPSec SA .................................................................. 62
Figure 19 VPN Wizard: IKE Tunnel Setting ......................................................................... 66
Figure 20 VPN Wizard: IPSec Setting ................................................................................. 67
Figure 21 VPN Wizard: VPN Status .................................................................................... 69
Figure 22 VPN Wizard: Complete ....................................................................................... 71
Figure 23 LAN: LAN ............................................................................................................ 75
Figure 24 LAN: Static DHCP ............................................................................................... 78
Figure 25 WAN: Route ...................................................................................................... 80
Figure 26 WAN: WAN: Ethernet ....................................................................................... 81
Figure 27 WAN: WAN: PPPoE ......................................................................................... 84
Figure 28 WAN: WAN: PPTP ............................................................................................. 86
Figure 29 WAN: DDNS ........................................................................................................ 88
Figure 30 ZyWALL Firewall Application .............................................................................. 93
Figure 31 Three-Way Handshake ....................................................................................... 94
Figure 32 SYN Flood ........................................................................................................... 95
Figure 33 Smurf Attack ....................................................................................................... 96
Figure 34 Stateful Inspection ............................................................................................... 98
Figure 35 LAN to WAN Traffic ............................................................................................. 106
Figure 36 WAN to LAN Traffic ............................................................................................. 106