Document Outline

• ZyWALL P1 V3.64 User’s Guide
• Copyright
• Federal Communications Commission (FCC) Interference Statement
• Safety Warnings
• ZyXEL Limited Warranty
• Customer Support
• Table of Contents
• List of Figures
• List of Tables
• Preface
• Getting to Know Your ZyWALL
  • 1.1 Overview
  • 1.2 ZyWALL Features
    • 1.2.1 Physical Features
    • 1.2.2 Non-Physical Features
  • 1.3 Applications
    • 1.3.1 Secure Network Access for Telecommuters
    • 1.3.2 LAN Network Protection
  • 1.4 ZyWALL Hardware Connection
  • 1.5 Front Panel LED
• Introducing the Web Configurator
  • 2.1 Overview
  • 2.2 Accessing the Web Configurator
  • 2.3 Resetting the ZyWALL
    • 2.3.1 Procedure to Use the Reset Button
  • 2.4 Navigating the Web Configurator
    • 2.4.1 The HOME Screen
    • 2.4.2 Navigation Panel
    • 2.4.3 System Statistics
    • 2.4.4 DHCP Table Screen
    • 2.4.5 VPN Status
• Wizard Setup
  • 3.1 Overview
  • 3.2 Internet Access Wizard Setup
    • 3.2.1 ISP Parameters
    • 3.2.2 WAN and DNS
      • 3.2.2.1 WAN IP Address Assignment
      • 3.2.2.2 IP Address and Subnet Mask
      • 3.2.2.3 DNS Server Address Assignment
      • 3.2.2.4 Ethernet
      • 3.2.2.5 PPPoE Encapsulation
      • 3.2.2.6 PPTP Encapsulation
    • 3.2.3 Internet Access Wizard Setup Complete
  • 3.3 VPN Wizard Setup
    • 3.3.1 IPSec
    • 3.3.2 Security Association
    • 3.3.3 My IP Address
    • 3.3.4 Secure Gateway Address
      • 3.3.4.1 Dynamic Secure Gateway Address
    • 3.3.5 VPN Wizard: Gateway Policy Setting
    • 3.3.6 VPN Wizard: Network Setting
    • 3.3.7 IKE Phases
      • 3.3.7.1 Negotiation Mode
      • 3.3.7.2 Pre-Shared Key
      • 3.3.7.3 Diffie-Hellman (DH) Key Groups
      • 3.3.7.4 Perfect Forward Secrecy (PFS)
  • 3.4 IPSec Algorithms
    • 3.4.1 AH (Authentication Header) Protocol
    • 3.4.2 ESP (Encapsulating Security Payload) Protocol
    • 3.4.3 IKE Tunnel Setting (IKE Phase 1)
    • 3.4.4 IPSec Setting (IKE Phase 2)
    • 3.4.5 VPN Status Summary
    • 3.4.6 VPN Wizard Setup Complete
• LAN Screens
  • 4.1 LAN Overview
  • 4.2 DHCP Setup
    • 4.2.1 IP Pool Setup
    • 4.2.2 DNS Servers
  • 4.3 LAN TCP/IP
    • 4.3.1 Factory LAN Defaults
    • 4.3.2 IP Address and Subnet Mask
    • 4.3.3 RIP Setup
    • 4.3.4 Multicast
  • 4.4 Configuring LAN
  • 4.5 Configuring Static DHCP
• WAN Screens
  • 5.1 WAN Overview
    • 5.1.1 TCP/IP Priority (Metric)
    • 5.1.2 WAN MAC Address
  • 5.2 WAN Route Setup
  • 5.3 Configuring WAN Setup
    • 5.3.1 Ethernet Encapsulation
    • 5.3.2 PPPoE Encapsulation
    • 5.3.3 PPTP Encapsulation
  • 5.4 Dynamic DNS
    • 5.4.1 DYNDNS Wildcard
    • 5.4.2 Configuring Dynamic DNS
• Firewalls
  • 6.1 Firewall Overview
  • 6.2 Types of Firewalls
    • 6.2.1 Packet Filtering Firewalls
    • 6.2.2 Application-level Firewalls
    • 6.2.3 Stateful Inspection Firewalls
  • 6.3 Introduction to ZyXEL’s Firewall
  • 6.4 Denial of Service
    • 6.4.1 Basics
    • 6.4.2 Types of DoS Attacks
      • 6.4.2.1 ICMP Vulnerability
      • 6.4.2.2 Illegal Commands (NetBIOS and SMTP)
      • 6.4.2.3 Traceroute
  • 6.5 Stateful Inspection
    • 6.5.1 Stateful Inspection Process
    • 6.5.2 Stateful Inspection and the ZyWALL
    • 6.5.3 TCP Security
    • 6.5.4 UDP/ICMP Security
    • 6.5.5 Upper Layer Protocols
  • 6.6 Guidelines For Enhancing Security With Your Firewall
  • 6.7 Packet Filtering Vs Firewall
    • 6.7.1 Packet Filtering:
      • 6.7.1.1 When To Use Filtering
    • 6.7.2 Firewall
      • 6.7.2.1 When To Use The Firewall
• Firewall Screens
  • 7.1 Access Methods
  • 7.2 Firewall Policies Overview
  • 7.3 Rule Logic Overview
    • 7.3.1 Rule Checklist
    • 7.3.2 Security Ramifications
    • 7.3.3 Key Fields For Configuring Rules
      • 7.3.3.1 Action
      • 7.3.3.2 Service
      • 7.3.3.3 Source Address
      • 7.3.3.4 Destination Address
  • 7.4 Connection Direction Examples
    • 7.4.1 LAN To WAN Rules
    • 7.4.2 WAN To LAN Rules
  • 7.5 Alerts
  • 7.6 Configuring Firewall
    • 7.6.1 Rule Summary
    • 7.6.2 Configuring Firewall Rules
    • 7.6.3 Configuring Custom Services
  • 7.7 Example Firewall Rule
  • 7.8 Predefined Services
  • 7.9 Anti-Probing
  • 7.10 Configuring Attack Alert
    • 7.10.1 Threshold Values
    • 7.10.2 Half-Open Sessions
      • 7.10.2.1 TCP Maximum Incomplete and Blocking Time
• Introduction to IPSec
  • 8.1 VPN Overview
    • 8.1.1 IPSec
    • 8.1.2 Security Association
    • 8.1.3 Other Terminology
      • 8.1.3.1 Encryption
      • 8.1.3.2 Data Confidentiality
      • 8.1.3.3 Data Integrity
      • 8.1.3.4 Data Origin Authentication
    • 8.1.4 VPN Applications
      • 8.1.4.1 Linking Two or More Private Networks Together
      • 8.1.4.2 Accessing Network Resources When NAT Is Enabled
      • 8.1.4.3 Unsupported IP Applications
  • 8.2 IPSec Architecture
    • 8.2.1 IPSec Algorithms
    • 8.2.2 Key Management
  • 8.3 Encapsulation
    • 8.3.1 Transport Mode
    • 8.3.2 Tunnel Mode
  • 8.4 IPSec and NAT
• VPN Screens
  • 9.1 VPN/IPSec Overview
  • 9.2 IPSec Algorithms
    • 9.2.1 AH (Authentication Header) Protocol
    • 9.2.2 ESP (Encapsulating Security Payload) Protocol
  • 9.3 My ZyWALL
  • 9.4 Secure Gateway Address
    • 9.4.1 Dynamic Secure Gateway Address
    • 9.4.2 Nailed Up
  • 9.5 NAT Traversal
    • 9.5.1 NAT Traversal Configuration
    • 9.5.2 X-Auth (Extended Authentication)
    • 9.5.3 Authentication Server
  • 9.6 ID Type and Content
    • 9.6.1 ID Type and Content Examples
  • 9.7 Pre-Shared Key
  • 9.8 IKE VPN Rule Summary Screen
    • 9.8.1 Configurign an IKE VPN Rule
    • 9.8.2 Configuring an IKE VPN Policy
      • 9.8.2.1 Activating a VPN Connection
  • 9.9 Viewing SA Monitor
  • 9.10 Configuring Global Setting
  • 9.11 Telecommuter VPN/IPSec Examples
    • 9.11.1 Telecommuters Sharing One VPN Rule Example
    • 9.11.2 Telecommuters Using Unique VPN Rules Example
  • 9.12 VPN and Remote Management
• Certificates
  • 10.1 Certificates Overview
    • 10.1.1 Advantages of Certificates
  • 10.2 Self-signed Certificates
  • 10.3 Configuration Summary
  • 10.4 My Certificates
  • 10.5 Certificate File Formats
  • 10.6 Importing a Certificate
  • 10.7 Creating a Certificate
  • 10.8 My Certificate Details
  • 10.9 Trusted CAs
  • 10.10 Importing a Trusted CA’s Certificate
  • 10.11 Trusted CA Certificate Details
  • 10.12 Trusted Remote Hosts
  • 10.13 Verifying a Trusted Remote Host’s Certificate
    • 10.13.1 Trusted Remote Host Certificate Fingerprints
  • 10.14 Importing a Trusted Remote Host’s Certificate
  • 10.15 Trusted Remote Host Certificate Details
  • 10.16 Directory Servers
  • 10.17 Add or Edit a Directory Server
• Network Address Translation (NAT)
  • 11.1 NAT Overview
    • 11.1.1 NAT Definitions
    • 11.1.2 What NAT Does
    • 11.1.3 How NAT Works
    • 11.1.4 NAT Mapping Types
  • 11.2 Using NAT
    • 11.2.1 SUA (Single User Account) Versus NAT
  • 11.3 Configuring NAT Overview
  • 11.4 Port Forwarding
    • 11.4.1 Default Server IP Address
    • 11.4.2 Port Forwarding: Services and Port Numbers
    • 11.4.3 Configuring Servers Behind Port Forwarding (Example)
    • 11.4.4 Port Translation
  • 11.5 Configuring Port Forwarding
  • 11.6 Configuring Trigger Port
• Static Route
  • 12.1 Static Route Overview
  • 12.2 Configuring IP Static Route
    • 12.2.1 Configuring a Static Route Entry
• Remote Management
  • 13.1 Remote Management Overview
    • 13.1.1 Remote Management Limitations
    • 13.1.2 Remote Management and NAT
    • 13.1.3 System Timeout
  • 13.2 Introduction to HTTPS
  • 13.3 Configuring WWW
  • 13.4 HTTPS Example
    • 13.4.1 Internet Explorer Warning Messages
    • 13.4.2 Netscape Navigator Warning Messages
    • 13.4.3 Avoiding the Browser Warning Messages
    • 13.4.4 Login Screen
  • 13.5 SSH Overview
  • 13.6 How SSH works
  • 13.7 SSH Implementation on the ZyWALL
    • 13.7.1 Requirements for Using SSH
  • 13.8 Configuring SSH
  • 13.9 Secure Telnet Using SSH Examples
    • 13.9.1 Example 1: Microsoft Windows
    • 13.9.2 Example 2: Linux
  • 13.10 Secure FTP Using SSH Example
  • 13.11 Telnet
  • 13.12 Configuring TELNET
  • 13.13 Configuring FTP
  • 13.14 Configuring SNMP
    • 13.14.1 Supported MIBs
    • 13.14.2 SNMP Traps
    • 13.14.3 REMOTE MANAGEMENT: SNMP
  • 13.15 Configuring DNS
  • 13.16 Introducing Vantage CNM
  • 13.17 Configuring CNM
• UPnP
  • 14.1 Universal Plug and Play Overview
    • 14.1.1 How Do I Know If I'm Using UPnP?
    • 14.1.2 NAT Traversal
    • 14.1.3 Cautions with UPnP
  • 14.2 UPnP and ZyXEL
  • 14.3 Configuring UPnP
  • 14.4 Displaying UPnP Port Mapping
  • 14.5 Installing UPnP in Windows Example
    • 14.5.1 Installing UPnP in Windows Me
    • 14.5.2 Installing UPnP in Windows XP
  • 14.6 Using UPnP in Windows XP Example
    • 14.6.1 Auto-discover Your UPnP-enabled Network Device
    • 14.6.2 Web Configurator Easy Access
• Logs Screens
  • 15.1 Configuring View Log
  • 15.2 Log Description Example
  • 15.3 Configuring Log Settings
  • 15.4 Configuring Reports
    • 15.4.1 Viewing Web Site Hits
    • 15.4.2 Viewing Protocol/Port
    • 15.4.3 Viewing LAN IP Address
    • 15.4.4 Reports Specifications
• Maintenance
  • 16.1 Maintenance Overview
    • 16.1.1 General Setup and System Name
    • 16.1.2 Domain Name
  • 16.2 Configuring Password
  • 16.3 Pre-defined NTP Time Servers List
  • 16.4 Configuring Time and Date
    • 16.4.1 Time Server Synchronization
  • 16.5 F/W Upload Screen
  • 16.6 Configuration Screen
    • 16.6.1 Backup Configuration
    • 16.6.2 Restore Configuration
    • 16.6.3 Back to Factory Defaults
  • 16.7 Restart Screen
• Firmware and Configuration File Maintenance
  • 17.1 Introduction
  • 17.2 Filename Conventions
  • 17.3 Backup Configuration
    • 17.3.1 Using the FTP Command from the Command Line
    • 17.3.2 GUI-based FTP Clients
    • 17.3.3 File Maintenance Over WAN
    • 17.3.4 Backup Configuration Using TFTP
    • 17.3.5 TFTP Command Example
    • 17.3.6 GUI-based TFTP Clients
  • 17.4 Restore Configuration
    • 17.4.1 Restore Using FTP
    • 17.4.2 Restore Using FTP Session Example
  • 17.5 Uploading Firmware and Configuration Files
    • 17.5.1 Firmware File Upload
    • 17.5.2 FTP File Upload Command from the Command Prompt Example
    • 17.5.3 FTP Session Example of Firmware File Upload
    • 17.5.4 TFTP File Upload
    • 17.5.5 TFTP Upload Command Example
• Troubleshooting
  • 18.1 Problems Starting Up the ZyWALL
  • 18.2 Problems Accessing the ZyWALL
    • 18.2.1 Pop-up Windows, JavaScripts and Java Permissions
      • 18.2.1.1 Internet Explorer Pop-up Blockers
        • 18.2.1.1.1 Disable pop-up Blockers
        • 18.2.1.1.2 Enable pop-up Blockers with Exceptions
      • 18.2.1.2 JavaScripts
      • 18.2.1.3 Java Permissions
        • 18.2.1.3.1 JAVA (Sun)
  • 18.3 Problems with the LAN Interface
  • 18.4 Problems with the WAN Interface
  • 18.5 Problems with Internet Access
  • 18.6 Problems with the Password
  • 18.7 Problems with Remote Management
• Setting up Your Computer’s IP Address
• IP Subnetting
• PPPoE
• PPTP
• Triangle Route
• SIP Passthrough
• VPN Setup
• Importing Certificates
• Command Interpreter
• Firewall Commands
• NetBIOS Filter Commands
• Certificates Commands
• Brute-Force Password Guessing Protection
• Log Descriptions
• Index
  • Numerics
  • A
  • B
  • C
  • D
  • E
  • F
  • G
  • H
  • I
  • K
  • L
  • M
  • N
  • O
  • P
  • Q
  • R
  • S
  • T
  • U
  • V
  • W
  • X
  • Z