Summary of the content on the page No. 1
ZyWALL 10/50
Internet Security Gateway
User’s Guide
Version 3.50
May 2002
Summary of the content on the page No. 2
ZYWALL 10/50 Internet Security Gateway Copyright Copyright © 2002 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Commu
Summary of the content on the page No. 3
ZYWALL 10/50 Internet Security Gateway Federal Communications Commission (FCC) Interference Statement This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: • This device may not cause harmful interference. • This device must accept any interference received, including interference that may cause undesired operations. This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FC
Summary of the content on the page No. 4
ZYWALL 10/50 Internet Security Gateway Information for Canadian Users The Industry Canada label identifies certified equipment. This certification means that the equipment meets certain telecommunications network protective operation and safety requirements. The Industry Canada label does not guarantee that the equipment will operate to a user's satisfaction. Before installing this equipment, users should ensure that it is permissible to be connected to the facilities of the local telecomm
Summary of the content on the page No. 5
ZYWALL 10/50 Internet Security Gateway Declaration of Conformity We, the Manufacturer/Importer, ZyXEL Communications Corp. No. 6, Innovation Rd. II, Science-Based Industrial Park, Hsinchu, Taiwan, 300 R.O.C declare that the product ZYWALL 10/50 is in conformity with (reference to the specification under which conformity is declared) Standard Version Standard Item 1994 • EN 55022 Radio disturbance characteristics — Limits and method of measurement. Disturbance in supply syste
Summary of the content on the page No. 6
ZYWALL 10/50 Internet Security Gateway ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the defective products or components without charge f
Summary of the content on the page No. 7
ZYWALL 10/50 Internet Security Gateway Customer Support Please have the following information ready when you contact customer support. • Product model and serial number. • Information in Menu 24.2.1 – System Information. • Warranty Information. • Date that you received your device. • Brief description of the problem and the steps you took to solve it. METHOD E-MAIL TELEPHONE/FAX WEB SITE/ FTP SITE REGULAR MAIL SUPPORT/SALES LOCATION www.zyxel.com ZyXEL Communication
Summary of the content on the page No. 8
ZYWALL 10/50 Internet Security Gateway Table of Contents Copyright .....................................................................................................................................................ii Federal Communications Commission (FCC) Interference Statement .................................................iii Information for Canadian Users ...............................................................................................................iv ZyXEL Limited
Summary of the content on the page No. 9
ZYWALL 10/50 Internet Security Gateway 3.1 Turning On Your ZyWALL ....................................................................................................... 3-1 3.1.1 Initial Screen....................................................................................................................... 3-1 3.1.2 Entering the Password........................................................................................................ 3-1 3.2 Navigating the SMT Interface ........
Summary of the content on the page No. 10
ZYWALL 10/50 Internet Security Gateway 5.3.7 IP Alias................................................................................................................................5-5 5.4 TCP/IP and DHCP Ethernet Setup Menu....................................................................................5-5 5.4.1 IP Alias Setup......................................................................................................................5-7 Chapter 6 Internet Access................
Summary of the content on the page No. 11
ZYWALL 10/50 Internet Security Gateway 9.1.5 NAT Mapping Types.......................................................................................................... 9-4 9.2 Using NAT................................................................................................................................. 9-6 9.2.1 SUA (Single User Account) Versus NAT.......................................................................... 9-6 9.2.2 Applying NAT....................................
Summary of the content on the page No. 12
ZYWALL 10/50 Internet Security Gateway 10.5.4 UDP/ICMP Security .......................................................................................................10-10 10.5.5 Upper Layer Protocols ....................................................................................................10-11 10.6 Guidelines For Enhancing Security With Your Firewall ....................................................10-11 10.6.1 Security In General ............................................
Summary of the content on the page No. 13
ZYWALL 10/50 Internet Security Gateway 13.2.1 Rule Checklist .................................................................................................................. 13-1 13.2.2 Security Ramifications ..................................................................................................... 13-2 13.2.3 Key Fields For Configuring Rules.................................................................................... 13-2 13.3 Connection Direction.......................
Summary of the content on the page No. 14
Summary of the content on the page No. 15
Getting Started Part I: Getting Started This part is structured as a step-by-step guide to help you connect, install and setup your ZyWALL to operate on your network and access the Internet. I
Summary of the content on the page No. 16
Summary of the content on the page No. 17
ZyWALL 10/50 Internet Security Gateway Chapter 1 Getting to Know Your ZyWALL This chapter introduces the main features and applications of the ZyWALL. 1.1 The ZyWALL 10/50 Internet Security Gateway The ZyWALL 10/50 is a dual Ethernet Internet security gateway integrated with a robust firewall and network management features designed for home offices and small businesses to access the Internet via cable/ADSL modem or Internet router. By integrating NAT, firewall and VPN capability, Zy
Summary of the content on the page No. 18
ZyWALL 10/50 Internet Security Gateway You can configure most features of the ZyWALL via SMT but we recommend you configure the firewall and Content Filters using the ZyWALL web configurator. Content Filtering The ZyWALL can block web features such as ActiveX controls, Java applets and cookies, as well as disable web proxies. The ZyWALL can also block specific URLs by using the keyword feature. Packet Filtering The Packet Filtering mechanism blocks unwanted traffic from entering/leaving y
Summary of the content on the page No. 19
ZyWALL 10/50 Internet Security Gateway Network Address Translation (NAT) NAT (Network Address Translation - NAT, RFC 1631) allows the translation of an Internet Protocol address used within one network to a different IP address known within another network. Port Forwarding Use this feature to forward incoming service requests to a server on your local network. You may enter a single port number or a range of port numbers to be forwarded, and the local IP address of the desired server.
Summary of the content on the page No. 20
ZyWALL 10/50 Internet Security Gateway 1.3 Applications 1.3.1 Secure Broadband Internet Access via Cable or DSL Modem A cable modem or xDSL modem can connect to the ZyWALL 10/50 for broadband Internet access via Ethernet port on the modem. It provides not only high speed Internet access, but secured internal network protection and management as well. Figure 1-1 Secure Internet Access via Cable Figure 1-2 Secure Internet Access via DSL You can also use your xDSL modem in the bridge
