Resumo do conteúdo contido na página número 1
ZyWALL 50
Internet Security Gateway
User’s Guide
Version 3.50
November 2001
Resumo do conteúdo contido na página número 2
ZyWALL 50 Internet Security Gateway Copyright Copyright © 2001 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communic
Resumo do conteúdo contido na página número 3
ZyWALL 50 Internet Security Gateway Federal Communications Commission (FCC) Interference Statement This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: • This device may not cause harmful interference. • This device must accept any interference received, including interference that may cause undesired operations. This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC R
Resumo do conteúdo contido na página número 4
ZyWALL 50 Internet Security Gateway Information for Canadian Users The Industry Canada label identifies certified equipment. This certification means that the equipment meets certain telecommunications network protective operation and safety requirements. The Industry Canada label does not guarantee that the equipment will operate to a user's satisfaction. Before installing this equipment, users should ensure that it is permissible to be connected to the facilities of the local telecommuni
Resumo do conteúdo contido na página número 5
ZyWALL 50 Internet Security Gateway Declaration of Conformity We, the Manufacturer/Importer, ZyXEL Communications Corp. No. 6, Innovation Rd. II, Science-Based Industrial Park, Hsinchu, Taiwan, 300 R.O.C declare that the product ZyWALL 50 is in conformity with (reference to the specification under which conformity is declared) Standard Version Standard Item • EN 55022 Radio disturbance characteristics — Limits and method of 1994 measurement. Disturbance in supply system cause
Resumo do conteúdo contido na página número 6
ZyWALL 50 Internet Security Gateway ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the defective products or components without charge for
Resumo do conteúdo contido na página número 7
ZyWALL 50 Internet Security Gateway Customer Support Please have the following information ready when you contact customer support. • Product model and serial number. • Information in Menu 24.2.1 – System Information. • Warranty Information. • Date that you received your device. • Brief description of the problem and the steps you took to solve it. METHOD E-MAIL TELEPHONE/FAX WEB SITE/ FTP SITE REGULAR MAIL SUPPORT/SALES LOCATION WORLDWIDE support@zyxel.com.tw +886-3-578-3942 ww
Resumo do conteúdo contido na página número 8
P312 Broadband Security Gateway Table of Contents Copyright..................................................................................................................................................... ii Federal Communications Commission (FCC) Interference Statement................................................. iii Information for Canadian Users............................................................................................................... iv ZyXEL Limited Warran
Resumo do conteúdo contido na página número 9
ZyWALL 50 Internet Security Gateway 3.1.1 Initial Screen.......................................................................................................................3-1 3.1.2 Entering the Password.........................................................................................................3-1 3.2 Navigating the SMT Interface ....................................................................................................3-2 3.2.1 Main Menu...........................
Resumo do conteúdo contido na página número 10
P312 Broadband Security Gateway Chapter 6 Internet Access ....................................................................................................................... 6-1 6.1 Internet Access Setup ................................................................................................................. 6-1 6.1.1 Ethernet Encapsulation....................................................................................................... 6-1 6.1.2 PPTP Encapsulation .......
Resumo do conteúdo contido na página número 11
ZyWALL 50 Internet Security Gateway 6.2.1 SUA (Single User Account) Versus NAT ..........................................................................6-6 6.2.2 Applying NAT ....................................................................................................................6-6 6.3 NAT Setup..................................................................................................................................6-8 6.3.1 Address Mapping Sets ........................
Resumo do conteúdo contido na página número 12
P312 Broadband Security Gateway 7.6 Guidelines For Enhancing Security With Your Firewall.......................................................... 7-11 7.6.1 Security In General........................................................................................................... 7-12 7.7 Packet Filtering Vs Firewall..................................................................................................... 7-12 7.7.1 Packet Filtering:..........................................
Resumo do conteúdo contido na página número 13
ZyWALL 50 Internet Security Gateway 10.2.3 Key Fields For Configuring Rules ....................................................................................10-2 10.3 Connection Direction............................................................................................................10-3 10.3.1 LAN to WAN Rules..........................................................................................................10-3 10.3.2 WAN to LAN Rules..................................
Resumo do conteúdo contido na página número 14
P312 Broadband Security Gateway 14.3 Exempt Computers ............................................................................................................... 14-1 14.4 Customizing.......................................................................................................................... 14-2 14.5 Keywords.............................................................................................................................. 14-2 14.6 Log Records .................
Resumo do conteúdo contido na página número 15
ZyWALL 50 Internet Security Gateway 17.1 System Status........................................................................................................................17-1 17.2 System Information and Console Port Speed........................................................................17-3 17.2.1 System Information...........................................................................................................17-4 17.2.2 Console Port Speed..............................
Resumo do conteúdo contido na página número 16
P312 Broadband Security Gateway 18.4.2 Configuration File Upload.............................................................................................. 18-11 18.4.3 FTP File Upload Command from the Command Line Example .................................... 18-12 18.4.4 FTP Session Example of Firmware File Upload ............................................................ 18-13 18.4.5 TFTP File Upload....................................................................................
Resumo do conteúdo contido na página número 17
ZyWALL 50 Internet Security Gateway 21.1 Introduction...........................................................................................................................21-1 Chapter 22 Introduction to IPSec .........................................................................................................22-1 22.1 Introduction...........................................................................................................................22-1 22.1.1 VPN ..............
Resumo do conteúdo contido na página número 18
P312 Broadband Security Gateway 23.5 Manual Setup...................................................................................................................... 23-15 23.5.1 Active Protocol............................................................................................................... 23-15 23.5.2 Security Parameter Index (SPI) ...................................................................................... 23-15 Chapter 24 SA Monitor ...........................
Resumo do conteúdo contido na página número 19
ZyWALL 50 Internet Security Gateway List of Figures Figure 1-1 Secure Internet Access via Cable.................................................................................................. 1-4 Figure 1-2 Secure Internet Access via DSL.................................................................................................... 1-4 Figure 1-3 VPN Application...........................................................................................................................
Resumo do conteúdo contido na página número 20
P312 Broadband Security Gateway Figure 4-2 Menu 11.1 — Remote Node Profile for PPPoE Encapsulation.................................................... 4-4 Figure 4-3 Menu 11.1 — Remote Node Profile for PPTP Encapsulation ...................................................... 4-6 Figure 4-4 Menu 11.3 — Remote Node Network Layer Options .................................................................. 4-7 Figure 4-5 Menu 11.3 — Remote Node Network Layer Options .............................
