User manual ZYXEL ZYWALL USG 300

[. . . ] ZyWALL USG 300 Unified Security Gateway User's Guide Version 2. 00 9/2007 Edition 2 DEFAULT LOGIN LAN Port 1 IP Address http://192. 168. 1. 1 User Name admin Password 1234 www. zyxel. com About This User's Guide About This User's Guide This manual is designed to guide you through the configuration of your ZyWALL for its various applications. · Introduction (ZyWALL, web configurator) · Features (by menu item in the web configurator) · Overview, including background · Web Configurator screens · Appendices Intended Audience This manual is intended for network administrators, or people who have a good knowledge of TCP/IP networking concepts and topology, who want to want to configure the ZyWALL using the web configurator. 1 Read Chapter 1 on page 53 chapter for an overview of features available on the ZyWALL. 2 Read Chapter 3 on page 65 for web browser requirements and an introduction to the main components, icons and menus in the ZyWALL web configurator. [. . . ] To add a VPN concentrator, click the Add icon at the top of the column. To edit a VPN concentrator, click the Edit icon next to the concentrator. To delete a VPN concentrator, click on the Remove icon next to the concentrator. The web configurator confirms that you want to delete the VPN concentrator. 20. 5. 2 VPN Concentrator Add/Edit The VPN Concentrator Add/Edit screen allows you to create a new VPN concentrator or edit an existing one. To access this screen, go to the VPN Concentrator Summary screen (see Section 20. 5. 1 on page 319), and click either the Add icon or an Edit icon. Figure 209 VPN > IPSec VPN > Concentrator > Edit ZyWALL USG 300 User's Guide 319 Chapter 20 IPSec VPN Each field is described in the following table. Table 98 VPN > IPSec VPN > Concentrator > Edit LABEL Name DESCRIPTION Enter the name of the concentrator. You may use 1-31 alphanumeric characters, underscores(_), or dashes (-), but the first character cannot be a number. This field is a sequential value, and it is not associated with a specific member in the concentrator. This field displays the name of each member in the concentrator. # Member Note: You must disable policy enforcement in each member. See Section 20. 3. 2 on page 298. Click the Popup icon to change this member in the group. The following screen appears. Figure 210 Network > IPSec VPN > Concentrator > Edit > Member Add icon This column provides icons to add members to and remove members from the concentrator. To add a member to the concentrator, click the Add icon at the top of the column to add the new member at the beginning of the list, or click the Add icon next to an existing member to add the new member after the existing one. To remove a member from the concentrator, click on the Remove icon next to the member. Click Cancel to exit this screen without saving. OK Cancel 20. 6 SA Monitor Screen You can use the SA Monitor screen to display and to manage active IPSec SA. The following screen appears. 320 ZyWALL USG 300 User's Guide Chapter 20 IPSec VPN Figure 211 VPN > IPSec VPN > SA Monitor Each field is described in the following table. Table 99 VPN > IPSec VPN > SA Monitor LABEL Name DESCRIPTION Enter the name of a IPSec SA here and click Search to find it (if it is associated). Enter the IP address(es) or names of the local and remote policies for an IPSec SA and click Search to find it. Click this button to search for an IPSec SA that matches the information you specified above. This is the number of the page of entries currently displayed and the total number of pages of entries. Type a page number to go to or use the arrows to navigate the pages of entries. This field is a sequential value, and it is not associated with a specific SA. This field displays the content of the local and remote policies for this IPSec SA. This field displays the encryption and authentication algorithms used in the SA. This field displays how many seconds remain in the SA life time, before the ZyWALL automatically disconnects the IPSec SA. [. . . ] session monitor L2TP VPN 348 sessions 640 severity (IDP) 422, 426 SHA1 308 shell scripts 615 and users 505 downloading 623 editing 622 managing 622 not stopping or starting the ZyWALL 56 syntax 615 uploading 624 way the ZyWALL runs 616 shutdown 55 signature categories access control 428 buffer overflow 428 DoS/DDoS 428 IM 427 P2P 427 scan 428 spam 427 virus/worm 428 Web attack 428 signature ID 426, 435, 437 signatures anti-virus 413 Simple Certificate Enrollment Protocol (SCEP) 551 Simple Network Management Protocol. SIP 267 additional signaling port 270 and firewall 267 and RTP 266 media inactivity timeout 270 signaling inactivity timeout 270 signaling port 270 smurf attack 452 SNAT 226 SNMP 607 agents 607 and address groups 609 and address objects 609 and zones 609 Get 607 GetNext 607 Manager 607 managers 607 MIB 607, 608 network components 607 Set 608 Trap 608 traps 608 versions 607 Snort equivalent terms 443 Snort rule header 443 Snort rule options 443 Snort signatures 443 Source Network Address Translation. specifications 655 device 655 feature 655 hardware 655 spillover (for load balancing) 221 SQL slammer 417, 445 SSH 600 774 ZyWALL USG 300 User's Guide Index and address groups 602 and address objects 602 and certificates 602 and zones 602 client requirements 601 encryption methods 601 for secure Telnet 603 how connection is established 600 versions 601 with Linux 603 with Microsoft Windows 603 SSL 326, 588 certificates 332 computer names 326 full-tunnel mode 326 global setting 327 IP pool 326 monitor 326 network list 326 policy 323 remote user login 332 remote user logout 335 user screen bookmarks 335 user screens 331, 334 user screens access methods 331 user screens certificates 332 user screens login 332 user screens logout 335 user screens required information 332 user screens system requirements 331 WINS 326 SSL application edit 568 SSL application object 567 add 568 file sharing 567 file sharing application 570 remote user screen links 567 summary 567 types 567 web-based 567, 568 web-based example 569 SSL connection monitor 326 SSL policy 323 add 325 edit 325 objects used 323 stac compression 565 starting the ZyWALL 55 startup-config. conf 617 and synchronization (device HA) 500 if errors 617 missing at restart 617 present at restart 617 startup-config-bad. conf 617 static routes 232 and interfaces 234 and OSPF 239 and RIP 235 configuration overview 118 metric 234 prerequisites 118 statistics anti-virus 642 application patrol 399 bandwidth 400 IDP 643 protocol 400 status bar 72 warning message popup 72 stopping the ZyWALL 55 streaming protocols managing 165, 379 strict source routing 434 STUN and VoIP pass through 265 subscription services 165 and synchronization (device HA) 500 AppPatrol 165 content filtering 166 content filtering. status 168, 389, 407 trial service activation 167 upgrading 169 Supporting Disk 4 SYN flood 453 synchronization 500 and subscription services 500 information synchronized 500 password 501 port number 501 restrictions 500 syntax conventions 5 syslog servers. [. . . ]