Summary of the content on the page No. 1
ZyWALL 35
Internet Security Appliance
Quick Start Guide
Version 3.62
April 2004
Summary of the content on the page No. 2
ZyWALL 35 Internet Security Appliance Introducing the ZyWALL The ZyWALL 35 is the ideal secure gateway for all data passing between the Internet and the LAN. By integrating NAT, firewall, content filtering, certificates and VPN capability, ZyXEL’s ZyWALL 35 is a complete security solution that protects your Intranet and efficiently manages data traffic on your network. The ZyWALL increases network security by adding up to four De-Militarized Zone (DMZ) ports for use with publicly accessi
Summary of the content on the page No. 3
ZyWALL 35 Internet Security Appliance 1 Hardware Connections 1.1 Front Panel and Connectors Refer to section 1.3 on how to setup your ZyWALL. LABEL DESCRIPTION RESET You only need to use this button if you’ve forgotten the ZyWALL’s password. It returns the ZyWALL to the factory defaults (password is 1234, LAN IP address 192.168.1.1, terminal emulation settings as described below etc.; see your User’s Guide for details). WAN 10/100 These ports are auto-negotiating (can connect at 10
Summary of the content on the page No. 4
ZyWALL 35 Internet Security Appliance LABEL DESCRIPTION EXTENSION Do not insert or remove a card with the ZyWALL turned on. CARD SLOT Turn off the ZyWALL before inserting or removing an 802.11b/g-compliant wireless LAN PCMCIA or CardBus card (to avoid damage). Do not force, bend or twist the wireless LAN card. POWER Connect the included power adaptor (use only this adaptor) to this power socket. 12VDC 1.3 Setting Up Your ZyWALL 1. Connect your cable/DSL modem(s) to WAN1 port and/
Summary of the content on the page No. 5
ZyWALL 35 Internet Security Appliance 3. Slide the 64-pin connector end of the PCMCIA or CardBus wireless LAN card into the extension card slot if you want to add a 802.11b/g-compliant wireless LAN. 4
Summary of the content on the page No. 6
ZyWALL 35 Internet Security Appliance 4. If you want to set up a backup WAN connection, connect the 9-pin female end of your modem or Terminal Adaptor (TA) cable to DIAL BACKUP port and the other end to your modem or TA. 5. If you want to configure the ZyWALL using the SMT (System Management Terminal) via CONSOLE port, connect the 9-pin male end of the console cable to the console port of the ZyWALL and the other end to a serial port (COM1, COM2 or other COM port) on your computer. 6. A
Summary of the content on the page No. 7
ZyWALL 35 Internet Security Appliance 1.4 Front Panel LEDs LED COLOR STATUS DESCRIPTION PWR Off The ZyWALL is turned off. Green On The ZyWALL is turned on. Red On The power to the ZyWALL is too low. SYS Green Off The ZyWALL is not ready or has failed. On The ZyWALL is ready and running. Flashing The ZyWALL is restarting. ACT Green Off The backup port is not connected. Flashing The backup port is sending or receiving packets. CARD Green Off The wireless LAN is not ready, or has fa
Summary of the content on the page No. 8
ZyWALL 35 Internet Security Appliance 2 Setting Up Your Computer’s IP Address Skip this section if your computer is already set up to accept a dynamic IP address. This is the default for most new computers. The ZyWALL is already set up to assign your computer an IP address. Use this section to set up your computer to receive an IP address or assign it a static IP address in the 192.168.1.2 to 192.168.1.254 range with a subnet mask of 255.255.255.0. This is necessary to ensure that your c
Summary of the content on the page No. 9
ZyWALL 35 Internet Security Appliance 6. Click Advanced. Remove any previously installed gateways in the IP Settings tab and click OK to go back to the Internet Protocol TCP/IP Properties screen. 7. Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. If you have more than two
Summary of the content on the page No. 10
ZyWALL 35 Internet Security Appliance 3.1 Accessing Your ZyWALL Via Web Configurator 1. Launch your web browser. Enter “192.168.1.1” as the web site address. Web site address. 2. The default password (“1234”) is already in the password field (in non-readable format). Click Login to proceed to a screen asking you to change your password. Click Reset to revert to the default password in the password field. Default password. 3. It is highly recommended you change the default password!
Summary of the content on the page No. 11
ZyWALL 35 Internet Security Appliance 4. Click Apply in the Replace Certificate screen to create a certificate using your ZyWALL’s MAC address that will be specific to this device. 5. You should now see the web configurator HOME screen. Click Internet Access and VPN Wizard to begin setup wizards screens to help you configure your ZyWALL for the first time. Click a link in the navigation panel to configure that ZyWALL feature. Click MAINTENANCE in the navigation panel to upload fi
Summary of the content on the page No. 12
ZyWALL 35 Internet Security Appliance The ZyWALL automatically logs you out if it is left idle for five minutes. If this happens to you, simply log back in. This idle timeout timer is one of the many ZyWALL features that you may edit using the web configurator. Wizards Navigation panel LOGOUT 11
Summary of the content on the page No. 13
ZyWALL 35 Internet Security Appliance 3.2 Using the Wizard to Configure for Internet Access 1. Click Internet Access in the HOME screen to help you configure your WAN1 on the ZyWALL to access the Internet. The first wizard screen has three variations depending on what encapsulation type you use. Use the information in Internet Account Information to fill in fields. Choose Ethernet when the WAN port is used as a regular Ethernet. Choose from Standard or a RoadRunner version. You’ll ne
Summary of the content on the page No. 14
ZyWALL 35 Internet Security Appliance Choose PPTP if your service provider uses a DSL terminator with PPTP login. The ZyWALL must have a static IP address in this case. You’ll also need a login name, associated password, the DSL terminator IP address and possibly a connection ID. Click Next to continue. Internet Connection with PPTP 2. Fill in the fields and click Finish to save and complete the wizard setup. WAN IP Address Assignment Select Get automatically from ISP if your IS
Summary of the content on the page No. 15
ZyWALL 35 Internet Security Appliance 3.3 Test Your Internet Connection Launch your web browser and navigate to www.zyxel.com. You don’t need a dial-up program such as Dial Up Networking. Refer to the User’s Guide for more detailed information on the complete range of ZyWALL features. 3.4 Using the Wizard to Configure a VPN Policy Refer to your User’s Guide for more background information about VPN. 1. Click VPN Wizard in the HOME screen to help you edit a VPN rule that use a pre-shared
Summary of the content on the page No. 16
ZyWALL 35 Internet Security Appliance Remote Network If the Remote Network field is configured to Single, enter a (static) IP address on the network behind the remote IPSec router. If the Remote Network field is configured to Range IP, enter the beginning and end (static) IP address, in a range of computers on the network behind the remote IPSec router. If the Remote Network field is configured to Subnet, enter a (static) IP address and subnet mask on the network behind the remote IPSec r
Summary of the content on the page No. 17
ZyWALL 35 Internet Security Appliance 4. Use the forth wizard screen to configure IPSec settings and click Next to continue. Choose Tunnel mode or Transport mode. Choose which protocol to use (ESP or AH) for the IKE key exchange. Choose an encryption algorithm or select NULL to set up a tunnel without encryption. Choose an authentication algorithm. Set the IPSec SA lifetime. This field allows you to determine how long the IPSec SA should stay up before it times out. Choose whether
Summary of the content on the page No. 18
ZyWALL 35 Internet Security Appliance 4 Troubleshooting PROBLEM CORRECTIVE ACTION None of the Make sure that you have the power adaptor connected to the ZyWALL and plugged in to an LEDs turn on appropriate power source. Check all cable connections. when you turn If the LEDs still do not turn on, you may have a hardware problem. In this case, you should contact on the ZyWALL. your local vendor. Cannot access Check the cable connection between the ZyWALL and your computer or hub. Refer
