Resumen del contenido incluido en la página 1
ZyWALL 50
Internet Security Gateway
User’s Guide
Version 3.50
November 2001
Resumen del contenido incluido en la página 2
ZyWALL 50 Internet Security Gateway Copyright Copyright © 2001 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communic
Resumen del contenido incluido en la página 3
ZyWALL 50 Internet Security Gateway Federal Communications Commission (FCC) Interference Statement This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: • This device may not cause harmful interference. • This device must accept any interference received, including interference that may cause undesired operations. This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC R
Resumen del contenido incluido en la página 4
ZyWALL 50 Internet Security Gateway Information for Canadian Users The Industry Canada label identifies certified equipment. This certification means that the equipment meets certain telecommunications network protective operation and safety requirements. The Industry Canada label does not guarantee that the equipment will operate to a user's satisfaction. Before installing this equipment, users should ensure that it is permissible to be connected to the facilities of the local telecommuni
Resumen del contenido incluido en la página 5
ZyWALL 50 Internet Security Gateway Declaration of Conformity We, the Manufacturer/Importer, ZyXEL Communications Corp. No. 6, Innovation Rd. II, Science-Based Industrial Park, Hsinchu, Taiwan, 300 R.O.C declare that the product ZyWALL 50 is in conformity with (reference to the specification under which conformity is declared) Standard Version Standard Item • EN 55022 Radio disturbance characteristics — Limits and method of 1994 measurement. Disturbance in supply system cause
Resumen del contenido incluido en la página 6
ZyWALL 50 Internet Security Gateway ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the defective products or components without charge for
Resumen del contenido incluido en la página 7
ZyWALL 50 Internet Security Gateway Customer Support Please have the following information ready when you contact customer support. • Product model and serial number. • Information in Menu 24.2.1 – System Information. • Warranty Information. • Date that you received your device. • Brief description of the problem and the steps you took to solve it. METHOD E-MAIL TELEPHONE/FAX WEB SITE/ FTP SITE REGULAR MAIL SUPPORT/SALES LOCATION WORLDWIDE support@zyxel.com.tw +886-3-578-3942 ww
Resumen del contenido incluido en la página 8
P312 Broadband Security Gateway Table of Contents Copyright..................................................................................................................................................... ii Federal Communications Commission (FCC) Interference Statement................................................. iii Information for Canadian Users............................................................................................................... iv ZyXEL Limited Warran
Resumen del contenido incluido en la página 9
ZyWALL 50 Internet Security Gateway 3.1.1 Initial Screen.......................................................................................................................3-1 3.1.2 Entering the Password.........................................................................................................3-1 3.2 Navigating the SMT Interface ....................................................................................................3-2 3.2.1 Main Menu...........................
Resumen del contenido incluido en la página 10
P312 Broadband Security Gateway Chapter 6 Internet Access ....................................................................................................................... 6-1 6.1 Internet Access Setup ................................................................................................................. 6-1 6.1.1 Ethernet Encapsulation....................................................................................................... 6-1 6.1.2 PPTP Encapsulation .......
Resumen del contenido incluido en la página 11
ZyWALL 50 Internet Security Gateway 6.2.1 SUA (Single User Account) Versus NAT ..........................................................................6-6 6.2.2 Applying NAT ....................................................................................................................6-6 6.3 NAT Setup..................................................................................................................................6-8 6.3.1 Address Mapping Sets ........................
Resumen del contenido incluido en la página 12
P312 Broadband Security Gateway 7.6 Guidelines For Enhancing Security With Your Firewall.......................................................... 7-11 7.6.1 Security In General........................................................................................................... 7-12 7.7 Packet Filtering Vs Firewall..................................................................................................... 7-12 7.7.1 Packet Filtering:..........................................
Resumen del contenido incluido en la página 13
ZyWALL 50 Internet Security Gateway 10.2.3 Key Fields For Configuring Rules ....................................................................................10-2 10.3 Connection Direction............................................................................................................10-3 10.3.1 LAN to WAN Rules..........................................................................................................10-3 10.3.2 WAN to LAN Rules..................................
Resumen del contenido incluido en la página 14
P312 Broadband Security Gateway 14.3 Exempt Computers ............................................................................................................... 14-1 14.4 Customizing.......................................................................................................................... 14-2 14.5 Keywords.............................................................................................................................. 14-2 14.6 Log Records .................
Resumen del contenido incluido en la página 15
ZyWALL 50 Internet Security Gateway 17.1 System Status........................................................................................................................17-1 17.2 System Information and Console Port Speed........................................................................17-3 17.2.1 System Information...........................................................................................................17-4 17.2.2 Console Port Speed..............................
Resumen del contenido incluido en la página 16
P312 Broadband Security Gateway 18.4.2 Configuration File Upload.............................................................................................. 18-11 18.4.3 FTP File Upload Command from the Command Line Example .................................... 18-12 18.4.4 FTP Session Example of Firmware File Upload ............................................................ 18-13 18.4.5 TFTP File Upload....................................................................................
Resumen del contenido incluido en la página 17
ZyWALL 50 Internet Security Gateway 21.1 Introduction...........................................................................................................................21-1 Chapter 22 Introduction to IPSec .........................................................................................................22-1 22.1 Introduction...........................................................................................................................22-1 22.1.1 VPN ..............
Resumen del contenido incluido en la página 18
P312 Broadband Security Gateway 23.5 Manual Setup...................................................................................................................... 23-15 23.5.1 Active Protocol............................................................................................................... 23-15 23.5.2 Security Parameter Index (SPI) ...................................................................................... 23-15 Chapter 24 SA Monitor ...........................
Resumen del contenido incluido en la página 19
ZyWALL 50 Internet Security Gateway List of Figures Figure 1-1 Secure Internet Access via Cable.................................................................................................. 1-4 Figure 1-2 Secure Internet Access via DSL.................................................................................................... 1-4 Figure 1-3 VPN Application...........................................................................................................................
Resumen del contenido incluido en la página 20
P312 Broadband Security Gateway Figure 4-2 Menu 11.1 — Remote Node Profile for PPPoE Encapsulation.................................................... 4-4 Figure 4-3 Menu 11.1 — Remote Node Profile for PPTP Encapsulation ...................................................... 4-6 Figure 4-4 Menu 11.3 — Remote Node Network Layer Options .................................................................. 4-7 Figure 4-5 Menu 11.3 — Remote Node Network Layer Options .............................
