USG 300 - Firewall ZYXEL - Free user manual and instructions

USER MANUAL USG 300 ZYXEL

Front and Rear Panels

Checking the Package Contents Your package should include one of each of the following: + ZyWALL USG + RJ-45 Ethernet cable + Configuration 300 + RS-232 console Y- Reference Card + Power cord cable -c t disk + Rack-mounting + Printed Quick Start (CD) is kit Guide

Rack-mounted Installation Mount the ZyWALL in a 19-inch rack or place it on a sturdy, flat surface. Leave 10 cm of clearance at the sides and 20 cm in the rear.

1. Align one bracket with the holes on one side of the ZyWALL and

secure it with the included bracket screws. Similarly, attach the other bracket.

2. After attaching both mounting brackets, position the ZyWALL in the

rack by lining up the holes in the brackets with the appropriate holes on the rack. Secure the ZyWALL to the rack with the rack-mounting screws. DORE TET pl CR DL til

Connecting the Hardware Make sure that the power switch on the rear panel is turned off before you make the hardware connections.

1. ltis recommended that you configure the ZyWALL before using it to

protect your network. Use an Ethernet cable to connect a computer to port 1.

2. Use another Ethernet cable(s) to connect port 2 and/or port 3 to an

Ethernet jack with Internet access. — — Æ

3. Use the included power cord to connect the power socket on the rear

panel to a power outlet.

4. Push the power switch to the on position and look at the front panel.

The PWR light turns on. The SYS light blinks during system testing andinitialization and then stays on when the system is ready.

and go to http://192.168.1.1 (the ZyWALL automatically redirects you to https://

you get a security alert or certificate screen. # Information you exchange with this ste cannot be viewed or changed by others. However, there is a problem with the sites secunly certificate. The security certficate was issued by à company you have not chosen ta trust. View the certificate to determine whether you want to trust the cerifing authority. © The secuity certificate date is valid 4 The name on the security certicate is invalid or does not match the name of the site Do you want to proceed? View Certficate

the user name and 1234 as the password. Click Login.

4. ltis strongly recommended

that you change the password. Type and retype a new password, and click Apply.

Installation Setup Wizard The Status screen opens. Click the Wizard icon in the upper right corner. LÉ) Lin. _—. syst System Name: gynallusg-300 Sem ouxrizr Model Name: Zywau use 300 Curent 2007-03-26 10 Serial Number: 234131340 80-009-0110014A VPN Status: di Interface MAC Address Range: — 00:00:22:77:86:47 = 4d DHCP Table: Use an installation setup wizard to connect to the Internet and register the ZyWALL and/or activate trial services, like IDP and content filter. Use the installation wizard only for initial configuration starting from the default configuration.

Changes you make in the installation wizard may not be applied if you have already changed the ZyWALL's configuration. + INSTALLATION

sets up a single Internet connection for ge2.

TALLATION SETUP, TWO 1

+ INSTALLATION SETUP, TWO ISP sets up Internet connections for ge2 and ge3. The wizard screens vary depending on the encapsulation type you use. Refer to information provided by your ISP and the web help screens to know what to enter in each field. You can leave fields blank if you don't have that information. fa Internet Access 1SP Parameters WAN IP Address Assignments WAN Interface: ge IP Address

Default Settings and Port Details The ZyWALL is configured for the following network topology by default.

Zon IP Address and Suggested Use RE ce e DHCP Settings ain peus Settings 1 get LAN |192.168.1.1, DHCP Protected LAN server enabled 2,3 ge2, WAN | DHCP clients Connections to the ge3 Internet 4 ge4 DMZ | 192.168.2.1, DHCP Public servers (such as server disabled web, e-mail and FTP) 5 ge5 DMZ | 192.168.3.1, DHCP Public servers (such as server disabled web, e-mail and FTP) 6 ge6 WLA | 10.59.0.1, DHCP Wireless access points N server enabled 7 ge7 None | None, DHCP server Optional disabled AUX aux None | None Auxiliary modem CONSOLE N/A None | None Local management

Label Type Description USB USB Connect a (USB) 3G wireless card to access the Internet through a 3G network. At the time of writing, you can use the Huawei E220, E270. P1-P7 RJ-45 Use 8-wire Category 5e or above Ethernet cables to connect routers, switches, computers, routers, access points, and so on. AUX RS-232 | Use an RS-232 console cable to connect dial backup/dial-in modem. CONSOLE |RS-232 | Use an RS-232 console cable to connect a local computer for command-based management. EXTENSIO | PCMCI | Insert a wireless LAN card to use the wireless LAN feature. N CARD A At the time of writing, you can use ZyXEL's G-170S wireless SLOT card. You can optionally insert a 3G wireless card to access the Internet wirelessly via a 3G network. At the time of writing, you can use a Sierra Wireless AC850, AC860, AC880 or AC881 3G wireless card.

Troubleshooting Problem Corrective Action None of the LEDs turn on. Make sure that you have the power cord connected to the ZyWALL and plugged in to an appropriate power source. Make sure you have the ZyWALL turned on. Check all cable connections. If the LEDs still do not turn on, you may have a hardware problem. In this case, you should contact your local vendor.

Problem Corrective Action Cannot access the ZyWALL from the LAN. Check the cable connection between the ZyWALL and your computer or switch. Refer to section for details. Ping the ZyWALL from a LAN computer. Make sure your computer's Ethernet card is installed and functioning properly. Also make sure that its IP address is in the same subnet as the ZyWALL's. In the computer, click Start, (AIl) Programs, Accessories and then Command Prompt. In the Command Prompt window, type “ping” followed by the ZyWALL's LAN IP address (192.168.1.1 is the default) and then press [ENTER]. The ZyWALL should reply. If you've forgotten the ZyWALL's password, use the RESET button. Press the button in for about 5 seconds (or until the PWR LED starts to blink), then release it. It returns the ZyWALL to the factory defaults (password is 1234, LAN IP address 192.168.1.1 etc.; see your User's Guide for details). If you've forgotten the ZyWALL's IP address, you can use the commands through the console port to check it. Connect your computer to the CONSOLE port using a console cable. Your computer should have a terminal emulation communications program (such as HyperTerminal) set to VT100 terminal emulation, no parity, 8 data bits, 1 stop bit, no flow control and 115200 bps port speed. Cannot access the Internet. Check the ZyWALL's connection to the Ethernet jack with Internet access. Make sure the Internet gateway device (such as a DSL modem) is working properly. Check ge2's status in the Status screen. Use the installation setup wizard again and make sure that you enter the correct settings.

Procedure to View a Products Certification(s)

1. Go to www.zyxel.com.

2. Select your product from the drop-down list box on the ZyXEL home

page to go to that product's page.

3. Select the certification you wish to view from this page.

Sicherheitswarnung Information you exchange with this site cannot be viewed or oder ein changed the. Hoviever, Haris problem the ses + security certificate. Zertifikatsfenster j il î The security cercle was issued by a company you have erscheint, kicken Sie s not chosen to trust. View the certificate to determine whether auf Ja, um you want Lo trust the certifping author. fortzufahren. © The secuity certificate date is valid 4 The name on the security certicate is invalid or does not match the name of the site Do you want to proceed? À View Cotticate

continuar si se ha abierto una pantalla de alerta de seguridad o certificado. ECTS = ras Information you exchange with this site cannot be viewed or changed by others. However, there is a problem with the sites secunly certificate. The security certficate was issued by à company you have not chosen ta trust. View the certificate to determine whether you want to trust the cerifing authority. © The secuity certificate date is valid 4 The name on the security certicate is invalid or does not match the name of the site Do you want to proceed? View Certficate

continuer si vous recevez une alerte de sécurité ou un écran de certificat. ECTS = ras Information you exchange with this site cannot be viewed or changed by others. However, there is a problem with the sites secunly certificate. The security certficate was issued by à company you have not chosen ta trust. View the certificate to determine whether you want to trust the cerifing authority. © The secuity certificate date is valid 4 The name on the security certicate is invalid or does not match the name of the site Do you want to proceed? View Certficate

procedere se viene Information you exchange with this site cannot be viewed or visualizzato un avvisto { es However, there is a problem with the site's A N certificate. di protezione o una . i Th ity certificate d hi schermata per i À dan nat Vente cases 6 conte mate certificato. you went lo trust the certiying authority © The secuity certificate date is valid 4 The name on the security certicate is invalid or does not match the name of the site Do you want to proceed? View Certficate

RHBEARTÈN 15, Yes (I&L\) ÆT)YyILTÉA Tél ECTS = ras Information you exchange with this site cannot be viewed or changed by others. However, there is a problem with the sites secunly certificate. The security certficate was issued by à company you have not chosen ta trust. View the certificate to determine whether you want to trust the cerifing authority. © The secuity certificate date is valid 4 The name on the security certicate is invalid or does not match the name of the site Do you want to proceed? View Certficate

BOL, AMIS CAEA Encapsulation: <HEly WAN IP Address Assignments WAN Interface: ge IP Address

Kakux-n160 3anpocoB Ha nogTBepxqeHye Fa Information you exchange with this ste cannot be viewed or changed by others. However, there is a problem with the sites secunly certificate. NOTEHLMANIEHO The security cercle was issued by a company you have HeGesonacH bIX a not chosen ta trust. View the certificate to determine whether onepaLuü unu npyema you went lo trust the certiying authority CepTHDUKATOB ANA @ The secuity certificate date is valid. npononxeHua HaxmMyrTe Yes. AY The name on the security certificate is invalid or does not match the name of the site Do you want to proceed? View Certficate

LR NRARE LRIT SEE TER ON, ARE DURE PI PR HUFE ARR

MIRE TERERN © FURÉERR RTE RER

RSBSE MER "DURRBET - ECTS = ras Information you exchange with this site cannot be viewed or changed by others. However, there is a problem with the sites security certificate. AY The secuity certificate was issued by a company you have not chosen ta trust. View the certificate to determine whether you want to trust the cerifing authority. © The secuity certificate date is valid The name on the security certificate is invalid or does not match the name of the ste Do you want ta proceed? Yes View Certficate

WAN Interface: ge2 ÉETR zone: fran | IP Add: Assignment: pass I

HESRRRERSE (PIAIDSL SR) JSF ©