User manual ZYXEL USG 1000 QUICK GUIDE

[. . . ] · It is highly recommended you read Chapter 6 on page 93 for detailed information on essential terms used in the ZyWALL, what prerequisites are needed to configure a feature and how to use that feature. · It is highly recommended you read Chapter 7 on page 117 for ZyWALL application examples. · Subsequent chapters are arranged by menu item as defined in the Web Configurator. Read each chapter carefully for detailed information on that menu item. [. . . ] After each application gets its configured bandwidth rate, the ZyWALL uses the fairness- based scheduler to divide any unused bandwidth on the out-going interface amongst applications that need more bandwidth and have maximize bandwidth usage enabled. Higher priority traffic does not get a larger portion of the unused bandwidth. Bandwidth Management Behavior The following sections show how bandwidth management behaves with various settings. For example, you configure DMZ to WAN policies for FTP servers A and B. Each server tries to send 1000 kbps, but the WAN is set to a maximum ZyWALL USG 100/200 Series User's Guide 567 Chapter 32 Application Patrol outgoing speed of 1000 kbps. You configure policy A for server A's traffic and policy B for server B's traffic. Figure 411 Bandwidth Management Behavior 1000 kbps BWM 1000 kbps 1000 kbps Configured Rate Effect In the following table the configured rates total less than the available bandwidth and maximize bandwidth usage is disabled, both servers get their configured rate. Table 144 Configured Rate Effect POLICY A B CONFIGURED RATE 300 kbps 200 kbps MAX. U. No No PRIORITY 1 1 ACTUAL RATE 300 kbps 200 kbps Priority Effect Here the configured rates total more than the available bandwidth. Because server A has higher priority, it gets up to it's configured rate (800 kbps), leaving only 200 kbps for server B. Table 145 Priority Effect POLICY A B CONFIGURED RATE 800 kbps 1000 kbps MAX. PRIORITY ACTUAL RATE Yes Yes 1 2 800 kbps 200 kbps Maximize Bandwidth Usage Effect With maximize bandwidth usage enabled, after each server gets its configured rate, the rest of the available bandwidth is divided equally between the two. So server A gets its configured rate of 300 kbps and server B gets its configured rate of 200 kbps. Then the ZyWALL divides the remaining bandwidth (1000 - 500 = 500) equally between the two (500 / 2 = 250 kbps for each). The priority has no effect on how much of the unused bandwidth each server gets. 568 ZyWALL USG 100/200 Series User's Guide Chapter 32 Application Patrol So server A gets its configured rate of 300 kbps plus 250 kbps for a total of 550 kbps. The ZyWALL applies this limit before sending the traffic to the WAN. · Inbound traffic (to the LAN and DMZ from the WAN) is also limited to 200 kbps. The ZyWALL applies this limit before sending the traffic to LAN or DMZ. Set policies for other applications to lower priorities so the SIP traffic always gets the best treatment. 570 ZyWALL USG 100/200 Series User's Guide Chapter 32 Application Patrol · Enable maximize bandwidth usage so the SIP traffic can borrow unused bandwidth. Figure 413 SIP Any to WAN Bandwidth Management Example Outbound: 200 kbps BWM BWM Inbound: 200 kbps 32. 1. 3. 3 SIP WAN to Any Bandwidth Management Example You also create a policy for calls coming in from the SIP server on the WAN. It is the same as the SIP Any to WAN policy, but with the directions reversed (WAN to Any instead of Any to WAN). 32. 1. 3. 4 HTTP Any to WAN Bandwidth Management Example · Inbound traffic gets more bandwidth as the local users will probably download more than they upload (and the ADSL connection supports this). Set policies for other applications (except SIP) to lower priorities so the local users' HTTP traffic gets sent before non-SIP traffic. · Enable maximize bandwidth usage so the HTTP traffic can borrow unused bandwidth. Figure 414 HTTP Any to WAN Bandwidth Management Example Outbound: 200 kbps BWM BWM Inbound: 500 kbps ZyWALL USG 100/200 Series User's Guide 571 Chapter 32 Application Patrol 32. 1. 3. 5 FTP WAN to DMZ Bandwidth Management Example · ADSL supports more downstream than upstream so you allow remote users 300 kbps for uploads to the DMZ FTP server (outbound) but only 100 kbps for downloads (inbound). · Disable maximize bandwidth usage since you do not want to give FTP more bandwidth. Figure 415 FTP WAN to DMZ Bandwidth Management Example Outbound: 300 kbps BWM BWM Inbound: 100 kbps 32. 1. 3. 6 FTP LAN to DMZ Bandwidth Management Example · The LAN and DMZ zone interfaces are connected to Ethernet networks (not an ADSL device) so you limit both outbound and inbound traffic to 50 Mbps. · Disable maximize bandwidth usage since you do not want to give FTP more bandwidth. Figure 416 FTP LAN to DMZ Bandwidth Management Example BWM Inbound: 50 Mbps BWM Outbound: 50 Mbps 572 ZyWALL USG 100/200 Series User's Guide Chapter 32 Application Patrol 32. 2 Application Patrol General Screen Use this screen to enable and disable application patrol. It also lists the registration status and details about the signature set the ZyWALL is using. Note: You must register for the IDP/AppPatrol signature service (at least the trial) before you can use it. See Chapter 11 on page 285 for how to register. Click Configuration > App Patrol to open the following screen. Figure 417 Configuration > App Patrol > General The following table describes the labels in this screen. [. . . ] This Class B digital apparatus complies with Canadian ICES-003. Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada. Viewing Certifications 1 2 3 Go to http://www. zyxel. com. Select your product on the ZyXEL home page to go to that product's page. Select the certification you wish to view from this page. ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in material or workmanship for a specific period (the Warranty Period) from the date of purchase. [. . . ]