User manual ZYXEL ZYWALL 35

[. . . ] 4 Use the included power adaptor to connect the power socket (on the rear panel) to a power outlet. 2 ENGLISH 5 Look at the front panel. The SYS LED blinks while performing system testing and then stays on if the testing is successful. The ACT, CARD, LAN/DMZ and WAN LEDs turn on and stay on if the corresponding connections are properly made. 2 Accessing the Web Configurator Use this section to configure the WAN 1 interface for Internet access. Enter 192. 168. 1. 1 (the ZyWALL's default IP address) as the address. [. . . ] If you use private IP addresses on the DMZ, use NAT to make the servers publicly accessible (see Section 6). A public IP address must be on a separate subnet from the WAN port's public IP address. If you do not configure NAT for the public IP addresses on the DMZ, the ZyWALL routes traffic to the public IP addresses on the DMZ without performing NAT. This may be useful for hosting servers for NAT unfriendly applications. To configure a port as a DMZ port, click the Port Roles tab, select its radio button next to DMZ and click Apply. 6 NAT NAT (Network Address Translation - NAT, RFC 1631) means the translation of an IP address in one network to a different IP address in another. You can use the NAT Address Mapping screens to have the ZyWALL translate multiple public IP addresses to multiple private IP addresses on your LAN (or DMZ). 9 ENGLISH The following example allows access from the WAN to an HTTP (web) server on the DMZ. 1 Click ADVANCED, NAT in the navigation panel and then Port Forwarding. 6 Click Apply. 7 Firewall You can use the ZyWALL without configuring the firewall. The ZyWALL's firewall is pre-configured to protect your LAN from attacks from the Internet. By default, no traffic can enter your LAN unless a request was generated on the LAN first. The ZyWALL allows access to the DMZ from the WAN or LAN, but blocks traffic from the DMZ to the LAN. If you are using the ZyWALL in router mode, continue with the next section. For bridge mode, skip to Section 9. 10 ENGLISH 8 VPN Rule Setup A VPN (Virtual Private Network) tunnel gives you a secure connection to another computer or network. A gateway policy identifies the IPSec routers at either end of a VPN tunnel. A network policy specifies which devices (behind the IPSec routers) can use the VPN tunnel. This figure helps explain the main fields in the wizard screens. 1 Click VPN in the HOME screen (you may need to scroll up to see the link) to open the VPN wizard. 11 ENGLISH Note: Your settings are not saved when you click Back. 2 Use this screen to configure the gateway policy. Remote Gateway Address: Enter the IP address or domain name of the remote IPSec router. Select Range IP and enter starting and ending IP addresses for a specific range of IP addresses. Select Subnet and enter an IP address and subnet mask to specify IP addresses on a network by their subnet mask. 12 ENGLISH Note: Make sure that the remote IPSec router uses the same security settings that you configure in the next two screens. Negotiation Mode: Select Main Mode for identity protection. Select Aggressive Mode to allow more incoming connections from dynamic IP addresses to use separate passwords. Note: Multiple SAs (security associations) connecting through a secure gateway must have the same negotiation mode. Encryption Algorithm: Select 3DES or AES for stronger (and slower) encryption. Authentication Algorithm: Select MD5 for minimal security or SHA-1 for higher security. SA Life Time: Set how often the ZyWALL renegotiates the IKE SA (minimum 180 seconds). [. . . ] Die ZyWALL bietet die Möglichkeit, bei der Benutzung öffentlich zugänglicher Server die Portfunktionen zu wechseln (LAN zu DMZ) und erhöht damit die Netzwerksicherheit. In dieser Anleitung finden Sie eine Beschreibung der Anschlüsse und der Konfiguration, die notwendig ist, damit Sie die ZyWALL in Ihrem Netzwerk verwenden können. Eine ausführliche Beschreibung aller Funktionen finden Sie im Benutzerhandbuch. Bitte halten Sie die Daten für Ihren Internetzugang bereit. Diese Anleitung ist in die folgenden Abschnitte aufgeteilt. [. . . ]