User manual ZYXEL ZYWALL USG 300

[. . . ] ZyWALL USG 300 Unified Security Gateway User's Guide Version 2. 00 9/2007 Edition 2 DEFAULT LOGIN LAN Port 1 IP Address http://192. 168. 1. 1 User Name admin Password 1234 www. zyxel. com About This User's Guide About This User's Guide This manual is designed to guide you through the configuration of your ZyWALL for its various applications. · Introduction (ZyWALL, web configurator) · Features (by menu item in the web configurator) · Overview, including background · Web Configurator screens · Appendices Intended Audience This manual is intended for network administrators, or people who have a good knowledge of TCP/IP networking concepts and topology, who want to want to configure the ZyWALL using the web configurator. 1 Read Chapter 1 on page 53 chapter for an overview of features available on the ZyWALL. 2 Read Chapter 3 on page 65 for web browser requirements and an introduction to the main components, icons and menus in the ZyWALL web configurator. [. . . ] · Set the Destination Address to the IP address pool that the ZyWALL assigns to the remote users (L2TP_POOL in the following figure). · Set the next hop to be the VPN tunnel that you are using for L2TP. Figure 238 Policy Route for L2TP VPN L2TP_POOL LAN_SUBNET 346 ZyWALL USG 300 User's Guide Chapter 25 L2TP VPN 25. 4 L2TP VPN Configuration Click VPN > L2TP VPN to open the following screen. Use this screen to configure the ZyWALL's L2TP VPN settings. Disconnect any existing L2TP VPN sessions before modifying L2TP VPN settings. The remote users must make any needed matching configuration changes and re-establish the sessions using the new settings. Figure 239 VPN > L2TP VPN The following table describes the fields in this screen. Table 106 VPN > IPSec VPN > VPN Connection LABEL Enable L2TP Over IPSec VPN Connection DESCRIPTION Use this field to turn the ZyWALL's L2TP VPN function on or off. Select the IPSec VPN connection the ZyWALL uses for L2TP VPN. All of the configured VPN connections display here, but the one you use must meet the requirements listed in Section 25. 2 on page 345. Note: Modifying this VPN connection (or the VPN gateway that it uses) disconnects any existing L2TP VPN sessions. IP Address Pool Authentication Method Select the pool of IP addresses that the ZyWALL uses to assign to the L2TP VPN clients. Select Create Object to configure a new pool of IP addresses. Select how the ZyWALL authenticates a remote user before allowing access to the L2TP VPN tunnel. The authentication method has the ZyWALL check a user's user name and password against the ZyWALL's local database, a remote LDAP, RADIUS, a Active Directory server, or more than one of these. See Chapter 39 on page 541 for how to create authentication method objects. ZyWALL USG 300 User's Guide 347 Chapter 25 L2TP VPN Table 106 VPN > IPSec VPN > VPN Connection (continued) LABEL Allowed User DESCRIPTION The remote user must log into the ZyWALL to use the L2TP VPN tunnel. Select a user or user group that can use the L2TP VPN tunnel. Select Create Object to configure a new user account (see Section 34. 2. 1 on page 506 for details). Otherwise, select any to allow any user with a valid account and password on the ZyWALL to log in. The ZyWALL sends a Hello message after waiting this long without receiving any traffic from the remote user. The ZyWALL disconnects the VPN tunnel if the remote user does not respond. Specify the IP addresses of DNS servers to assign to the remote users. You can specify these IP addresses two ways. Custom Defined - enter a static IP address. From ISP - use the IP address of a DNS server that another interface received from its DHCP server. The WINS (Windows Internet Naming Service) server keeps a mapping table of the computer names on your network and the IP addresses that they are currently using. Type the IP addresses of up to two WINS servers to assign to the remote users. You can specify these IP addresses two ways. [. . . ] new IDP or AppPatrol signatures 166 SSL VPN 166 SSL VPN. status 168, 389, 407 trial service activation 167 upgrading 169 Supporting Disk 4 SYN flood 453 synchronization 500 and subscription services 500 information synchronized 500 password 501 port number 501 restrictions 500 syntax conventions 5 syslog servers. system name 158 system protect updating signatures 175 system reports. system uptime 158 system-default. conf 617 ZyWALL USG 300 User's Guide 775 Index T T/TCP 458 task bar properties 708 TCP 521 ACK (acknowledgment) 453 ACK number 438 connections 521 port numbers 521 SYN (synchronize) 453 window size 438 TCP Decoder 457 TCP decoy portscan 451 TCP distributed portscan 451 TCP flag bits 438 TCP portscan 451 TCP portsweep 451 TCP RST 452 TCP SYN flood 453 TCPdump 440 Telnet 604 and address groups 605 and address objects 605 and zones 605 with SSH 603 terminate user connection 327 terminology differences bandwidth management 112 NAT 112 with other products 112 with ZyNOS 112 three-way handshake 453 through-ZyWALL firewall. [. . . ]