User manual ZYXEL ZYWALL USG 1000

[. . . ] ZyWALL USG 1000 Unified Security Gateway User's Guide Version 2. 00 10/2007 Edition 1 DEFAULT LOGIN LAN Port P1 IP Address http://192. 168. 1. 1 User Name admin Password 1234 www. zyxel. com About This User's Guide About This User's Guide This manual is designed to guide you through the configuration of your ZyWALL for its various applications. · Introduction (ZyWALL, web configurator) · Features (by menu item in the web configurator) · Overview, including background · Web Configurator screens · Appendices Intended Audience This manual is intended for network administrators, or people who have a good knowledge of TCP/IP networking concepts and topology, who want to want to configure the ZyWALL using the web configurator. 1 Read Chapter 1 on page 53 chapter for an overview of features available on the ZyWALL. 2 Read Chapter 3 on page 65 for web browser requirements and an introduction to the main components, icons and menus in the ZyWALL web configurator. [. . . ] The authentication method has the ZyWALL check a user's user name and password against the ZyWALL's local database, a remote LDAP, RADIUS, a Active Directory server, or more than one of these. See Chapter 39 on page 541 for how to create authentication method objects. ZyWALL USG 1000 User's Guide 347 Chapter 25 L2TP VPN Table 106 VPN > IPSec VPN > VPN Connection (continued) LABEL Allowed User DESCRIPTION The remote user must log into the ZyWALL to use the L2TP VPN tunnel. Select a user or user group that can use the L2TP VPN tunnel. Select Create Object to configure a new user account (see Section 34. 2. 1 on page 506 for details). Otherwise, select any to allow any user with a valid account and password on the ZyWALL to log in. The ZyWALL sends a Hello message after waiting this long without receiving any traffic from the remote user. The ZyWALL disconnects the VPN tunnel if the remote user does not respond. Specify the IP addresses of DNS servers to assign to the remote users. You can specify these IP addresses two ways. Custom Defined - enter a static IP address. From ISP - use the IP address of a DNS server that another interface received from its DHCP server. The WINS (Windows Internet Naming Service) server keeps a mapping table of the computer names on your network and the IP addresses that they are currently using. Type the IP addresses of up to two WINS servers to assign to the remote users. You can specify these IP addresses two ways. Click Apply to save your changes in the ZyWALL. Click Cancel to start configuring this screen afresh. Keep Alive Timer First DNS Server Second DNS Server First WINS Server, Second WINS Server Apply Reset 25. 5 L2TP VPN Session Monitor Click VPN > L2TP VPN > Session Monitor to open the following screen. Use this screen to display and manage the ZyWALL's connected L2TP VPN sessions. Figure 240 VPN > L2TP VPN > Session Monitor The following table describes the fields in this screen. Table 107 VPN > L2TP VPN > Session Monitor LABEL # User Name Hostname Assigned IP Public IP DESCRIPTION This is the index number of a current L2TP VPN session. This field displays the remote user's user name. This field displays the name of the computer that has this L2TP VPN connection with the ZyWALL. This field displays the IP address that the ZyWALL assigned for the remote user's computer to use within the L2TP VPN tunnel. This field displays the public IP address that the remote user is using to connect to the Internet. 348 ZyWALL USG 1000 User's Guide Chapter 25 L2TP VPN Table 107 VPN > L2TP VPN > Session Monitor (continued) LABEL Disconnect Refresh DESCRIPTION Click the Disconnect icon next to an L2TP VPN connection to disconnect it. Click Refresh to update the information in the display. ZyWALL USG 1000 User's Guide 349 Chapter 25 L2TP VPN 350 ZyWALL USG 1000 User's Guide CHAPTER This chapter shows how to create a basic L2TP VPN tunnel. 26 L2TP VPN Example 26. 1 L2TP VPN Example This chapter uses the following settings in creating a basic L2TP VPN tunnel. Figure 241 L2TP VPN Example 172. 23. 37. 205 L2TP_POOL: 192. 168. 10. 10~192. 168. 10. 20 LAN_SUBNET: 192. 168. 1. 0/24 · The ZyWALL has a static IP address of 172. 23. 37. 205 for the ge3 interface. [. . . ] new IDP or AppPatrol signatures 166 SSL VPN 166 SSL VPN. status 168, 389, 407 trial service activation 167 upgrading 169 Supporting Disk 4 SYN flood 453 synchronization 500 and subscription services 500 information synchronized 500 password 501 port number 501 restrictions 500 syntax conventions 5 syslog servers. system name 158 system protect updating signatures 175 system reports. system uptime 158 system-default. conf 617 ZyWALL USG 1000 User's Guide 777 Index T T/TCP 458 task bar properties 710 TCP 521 ACK (acknowledgment) 453 ACK number 438 connections 521 port numbers 521 SYN (synchronize) 453 window size 438 TCP Decoder 457 TCP decoy portscan 451 TCP distributed portscan 451 TCP flag bits 438 TCP portscan 451 TCP portsweep 451 TCP RST 452 TCP SYN flood 453 TCPdump 440 Telnet 604 and address groups 604 and address objects 604 and zones 604 with SSH 602 terminate user connection 327 terminology differences bandwidth management 112 NAT 112 with other products 112 with ZyNOS 112 three-way handshake 453 through-ZyWALL firewall. [. . . ]