Summary of the content on the page No. 1
ZyWALL 70
Internet Security Appliance
Quick Start Guide CONTENTS
ENGLISH 2
Version 4.03
10/2007
Edition 1
DEUTSCH 19
ESPAÑOL 37
DEFAULT LOGIN
IP Address http://192.168.1.1 FRANÇAIS 54
User Name admin
ITALIANO 71
Password 1234
Р У ССКИЙ 88
106
简体中文
繁體中文 122
Copyright © 2007. All rights reserved.
Summary of the content on the page No. 2
ENGLISH ENGLISH Overview The ZyWALL 70 is a load-balancing, dual WAN firewall with VPN, bandwidth management, content filtering, anti-spam, anti-virus, IDP (Intrusion Detection and Protection) and many other features. You can use it as a transparent firewall and not reconfigure your network nor configure the ZyWALL’s routing features. The ZyWALL increases network security by providing DMZ ports for use with publicly accessible servers. This guide covers the initial connections and configurat
Summary of the content on the page No. 3
ENGLISH Do the following to make hardware connections for initial setup. 1 Use an Ethernet cable to connect the LAN port to a computer. You can also use Ethernet cables to connect public servers (web, e-mail, FTP, etc.) to the DMZ ports. 2 Use another Ethernet cable(s) to connect the WAN 1 and/or WAN 2 port to an Ethernet jack with Internet access. 3 Insert the ZyWALL Turbo extension card to use the anti-virus and IDP features or insert a wireless LAN card to use the wireless LAN feature
Summary of the content on the page No. 4
ENGLISH 2 Accessing the Web Configurator Use this section to configure the WAN 1 interface for Internet access. 1 Launch your web browser. Enter 192.168.1.1 (the 2 Click Login (the default password 1234 is already ZyWALL’s default IP address) as the address. entered). If the login screen does not display, see Section 10.1 to set your computer’s IP address. 3 Change the login password by entering a new 4 Click Apply to replace the ZyWALL’s default password and clicking Apply. digital certif
Summary of the content on the page No. 5
ENGLISH 6 Check the Network Status table. If the WAN 1 status is not Down and there is an IP address, go to Section 5. If the WAN 1 status is Down (or there is not an IP address), click the Wizard icon and use Section 4 to configure WAN 1. Use the NETWORK WAN screens if you need to configure WAN 2. You can also configure load balancing between the WAN ports. 3 Bridge Mode When you set the ZyWALL to bridge mode, it functions as a transparent firewall. Do the following to set
Summary of the content on the page No. 6
ENGLISH 1 Click MAINTENANCE in the navigation panel and then Device Mode. 2 Select Bridge and configure a (static) IP address subnet mask and gateway IP address for the ZyWALL’s LAN, WAN, DMZ and WLAN interfaces. 3 Click Apply. The ZyWALL restarts. Skip to Section 5 if you have servers that you need to be accessible from the WAN. 4 Internet Access Setup and Product Registration 1 Click the Wizard icon in the HOME screen and then Internet Access Setup to open the Internet access wi
Summary of the content on the page No. 7
ENGLISH • Ethernet Encapsulation Configure a Roadrunner service in the NETWORK WAN screens (use the WAN 1 tab). • PPP over Ethernet or PPTP Encapsulation Select Nailed-Up when you want your connection up all the time (this could be expensive if your ISP bills you for Internet usage time instead of a flat monthly fee). To not have the connection up all the time, specify an idle time-out period (in seconds) in Idle Timeout. 7
Summary of the content on the page No. 8
ENGLISH 2 Click Next to display the screen where you can register your ZyWALL with myZyXEL.com (ZyXEL’s online services center) and activate the free content filtering, anti-spam, anti-virus and IDP trial applications. Otherwise, click Skip and then Close to complete Internet access setup. Note: Make sure you have installed the ZyWALL Turbo Card before you activate the IDP and anti-virus subscription services. Turn the ZyWALL off before you install or remove the ZyWALL Turbo Card. 3 If y
Summary of the content on the page No. 9
ENGLISH 5 The following screen displays if the registration was not successful. Click Return to go back to the Device Registration screen and check your settings. 6 Click Close to leave the wizard screen when the registration and activation are done. Note: If you want to activate a standard service with your iCard’s PIN number (license key), use the REGISTRATION Service screen. See the user’s guide for details. 5 DMZ The DeMilitarized Zone (DMZ) allows public servers (web, e-mail, FTP, e
Summary of the content on the page No. 10
ENGLISH 2 Specify an IP address and subnet mask for the DMZ interface. If you use private IP addresses on the DMZ, use NAT to make the servers publicly accessible (see Section 6). A public IP address must be on a separate subnet from the WAN port’s public IP address. If you do not configure NAT for the public IP addresses on the DMZ, the ZyWALL routes traffic to the public IP addresses on the DMZ without performing NAT. This may be useful for hosting servers for NAT unfriendly applica
Summary of the content on the page No. 11
ENGLISH 1 Click ADVANCED, NAT in the navigation panel and then Port Forwarding. 2 Select the Active check box. 3 Type a name for the rule. 4 Type the port number that the service uses. 5 Type the HTTP server’s IP address. 6 Click Apply. 7 Firewall You can use the ZyWALL without configuring the firewall. The ZyWALL’s firewall is pre-configured to protect your LAN from attacks from the Internet. By default, no traffic can enter your LAN unless a request was generated on the LAN first. The Zy
Summary of the content on the page No. 12
ENGLISH This figure helps explain the main fields in the wizard screens. 1 Click the Wizard icon ( ) in the HOME screen and then the VPN Setup link to open the VPN wizard. Note: Your settings are not saved when you click Back. 2 Use this screen to configure the gateway policy. 3 Use this screen to configure the network policy. Name: Enter a name to identify the gateway policy. Leave the Active check box selected. Remote Gateway Address: Enter the IP address or Name: Enter a name to identif
Summary of the content on the page No. 13
ENGLISH Note: Make sure that the remote IPSec router uses the same security settings that you configure in the next two screens. Negotiation Mode: Select Main Mode for identity protection. Select Aggressive Mode to allow more incoming connections from dynamic IP addresses to use separate passwords. Note: Multiple SAs (security associations) connecting through a secure gateway must have the same negotiation mode. Encryption Algorithm: Select 3DES or AES for stronger (and slower) encryption.
Summary of the content on the page No. 14
ENGLISH 6 Check your VPN settings. Click Finish to save the 7 Click Close in the final screen to complete the settings. VPN wizard setup. Continue with the next section to activate the VPN rule and establish a VPN connection. 8.1 Using the VPN Connection Use VPN tunnels to securely send and retrieve files, and allow remote access to corporate networks, web servers and e-mail. Services work as if you were at the office instead of connected through the Internet. For example, the “test” V
Summary of the content on the page No. 15
ENGLISH 9 Anti-Spam Setup Use anti-spam to have the ZyWALL check for unsolicited commercial or junk e-mail (spam). Note: You must have already subscribed to the anti-spam service to use the feature (see page 6). 1 Click the Wizard icon in the HOME screen and then Anti-Spam Setup to open the anti-spam wizard. 2 Select the locations where you have e-mail servers. An icon of an e-mail server appears at each spot you select. In this example the e- mail servers are on the LAN. 3 The ZyWALL recomm
Summary of the content on the page No. 16
ENGLISH 4 Use this screen to enable anti- spam and select which traffic flows the ZyWALL scans for spam. The recommended traffic flows are already selected. You generally only need to select traffic directions that have incoming e-mail from outside e-mail servers. 5 Click Apply. 6 Click Close in the final screen to complete the anti-spam wizard setup. 7 Congratulations, you have configured the ZyWALL to scan for spam e-mail. You can also use the anti-spam whitelist and blacklist to id
Summary of the content on the page No. 17
ENGLISH Problem Corrective Action Cannot access Check the cable connection between the ZyWALL and your computer or hub. Refer to the ZyWALL from Section 1 for details. the LAN. Ping the ZyWALL from a LAN computer. Make sure your computer’s Ethernet card is installed and functioning properly. In the computer, click Start, (All) Programs, Accessories and then Command Prompt. In the Command Prompt window, type "ping" followed by the ZyWALL’s LAN IP address (192.168.1.1 is the default) and the
Summary of the content on the page No. 18
ENGLISH 3 Right-click Local Area Connection and then click Properties. 4 Select Internet Protocol (TCP/IP) (under the General tab in Windows XP) and click Properties. 5 The Internet Protocol TCP/IP Properties screen opens (the General tab in Windows XP). Select the Obtain an IP address automatically and Obtain DNS server address automatically options. 6 Click OK to close the Internet Protocol (TCP/IP) Properties window. 7 Click Close (OK in Windows 2000/NT) to close the Local Area Connect
Summary of the content on the page No. 19
DEUTSCH DEUTSCH Übersicht Die ZyWALL 70 ist eine Load-balancing-, Dual-WAN-Firewall mit VPN, Bandbreitenmanagement, Content Filtering, Anti-Spam, Anti-Virus, IDP (Intrusion Detection and Protection) und vielen anderen Funktionen. Sie können sie als transparente Firewall verwenden, ohne das Netzwerk neu zu konfigurieren und die Routingfunktionen des Geräts zu konfigurieren. Die ZyWALL erhöht die Netzwerksicherheit, indem sie DMZ- Ports für die Verwendung öffentlich zugänglicher Server bietet.
Summary of the content on the page No. 20
DEUTSCH Wenn Sie das Gerät installieren, müssen Sie die Hardwaregeräte folgendermaßen anschließen. 1 Verbinden Sie den LAN-Port mit einem Ethernet-Kabel mit dem Computer. Mit Ethernet-Kabeln können Sie auch öffentliche Server (Internet, E-Mail, FTP, usw.) an die DMZ-Ports anschließen. 2 Schließen Sie mit einem anderen Ethernet-Kabel den WAN 1- und/oder WAN 2-Port an die Ethernet- Buchse mit Internetzugriff an. 3 Wenn Sie die Antiviren- und IDP-Funktion verwenden möchten, müssen Sie die Erw
