User manual ZYXEL ZYWALL 5

[. . . ] ZyWALL 5 Internet Security Appliance Quick Start Guide Version 3. 62 (XD. 0) May 2004 ZyWALL 5 Internet Security Appliance Introducing the ZyWALL The ZyWALL 5 is the ideal secure gateway for all data passing between the Internet and the LAN. By integrating NAT, firewall, content filtering, certificates and VPN capability, ZyXEL's ZyWALL 5 is a complete security solution that protects your Intranet and efficiently manages data traffic on your network. The ZyWALL increases network security by adding up to four De-Militarized Zone (DMZ) ports for use with publicly accessible servers. Dial backup and traffic redirect enhance reliability. [. . . ] If you have more than two DNS servers, click Advanced, the DNS tab and then configure them using Add. 7. 8. 9. Click OK to close the Internet Protocol (TCP/IP) Properties window. Click OK to close the Local Area Connection Properties window. Checking Your Computer's IP Address 1. In the computer, click Start, (All) Programs, Accessories and then Command Prompt. In the Command Prompt window, type "ipconfig" and then press ENTER. Your computer's IP address must be in the correct range (192. 168. 1. 2 to 192. 168. 1. 254) with subnet mask 255. 255. 255. 0 in order to communicate with the ZyWALL. Refer to your User's Guide for detailed IP address configuration for other Windows and Macintosh computer operating systems. 3 Configuring Your ZyWALL Choose one of these methods to access and configure the ZyWALL. This Quick Start Guide shows you how to use the web configurator wizards only. See your User's Guide for background information on all ZyWALL features and SMT configuration. Click the web configurator online help for screenspecific web help. Web Configurator SMT (System Management Terminal). Access the SMT via: o o Console port using terminal emulation software LAN, WLAN, DMZ or WAN using Telnet 7 ZyWALL 5 Internet Security Appliance 3. 1 Accessing Your ZyWALL Via Web Configurator 1. When your ZyWALL is in router mode, enter "192. 168. 1. 1" (default) as the web site address. If you set the ZyWALL to bridge mode, use the IP address you configured to access it. Web site address. 2. The default password ("1234") is already in the password field (in non-readable format). Click Login to proceed to a screen asking you to change your password. Click Reset to revert to the default password in the password field. Default password. 3. It is highly recommended you change the default password!Enter a new password, retype it to confirm and click Apply; alternatively click Ignore if you do not want to change the password now. Change default password. 4. Click Apply in the Replace Certificate screen to create a certificate using your ZyWALL's MAC address that will be specific to this device. 8 ZyWALL 5 Internet Security Appliance 5. You should now see the web configurator HOME screen. The screen varies according to the device mode you select in the MAINTENANCE Device Mode screen (refer to your User's Guide for details on configuration). The ZyWALL automatically logs you out if it is left idle for five minutes. If this happens to you, simply log back in. This idle timeout timer is one of the many ZyWALL features that you may edit using the web configurator. Router Mode: Click Internet Access and VPN Wizard to begin setup wizards screens to help you configure your ZyWALL for the first time. Click a link in the navigation panel to configure that ZyWALL feature. Click MAINTENANCE in the navigation panel to upload firmware and back up, restore or upload a configuration file. [. . . ] Choose which protocol to use (ESP or AH) for the IKE key exchange. Choose an encryption algorithm or select NULL to set up a tunnel without encryption. This field allows you to determine how long the IPSec SA should stay up before it times out. Choose whether to enable Perfect Forward Secrecy (PFS) using DiffieHellman public-key cryptography. [. . . ]