USG 300 - Pare-feu ZYXEL - Free user manual and instructions

USER MANUAL USG 300 ZYXEL

DEFAULT LOGIN DETAILS IP Address: https://192.168.1.1 Username: admin Password: 1234

CONTENTS ENGLISH 3 DEUTSCH 17 ESPANOL 33 FRANÇAIS 47 ITALIANO 61 PYCCK/Ü 89 LES 103 FHÉbx 115

Copyright © 2008 ZyXEL Communications Corporation

Front and Rear Panels

PWR AUX RESET AUX CONSOLE SYS CARD 1-2

EXTENSION EXTENSION SOCKET POWER CARD SLOT 1 CARD SLOT 2

Your package should include one of each of the following:

+ ZyWALL USG + RJ-45 Ethernet cable + Configuration 300 + RS-232 console Y- Reference Card + Power cord cable

-c t disk + Rack-mounting + Printed Quick Start (CD) is

Rack-mounted Installation

Mount the ZyWALL in a 19-inch rack or place it on a sturdy, flat surface. Leave 10 cm of clearance at the sides and 20 cm in the rear.

1. Align one bracket with the holes on one side of the ZyWALL and

secure it with the included bracket screws. Similarly, attach the other bracket.

2. After attaching both mounting brackets, position the ZyWALL in the rack by lining up the holes in the brackets with the appropriate holes

on the rack. Secure the ZyWALL to the rack with the rack-mounting screws.

Connecting the Hardware

Make sure that the power switch on the rear panel is turned off before you make the hardware connections.

1. ltis recommended that you configure the ZyWALL before using it to protect your network. Use an Ethernet cable to connect a computer to port 1.

2. Use another Ethernet cable(s) to connect port 2 and/or port 3 to an Ethernet jack with Internet access.

3. Use the included power cord to connect the power socket on the rear panel to a power outlet.

4. Push the power switch to the on position and look at the front panel. The PWR light turns on. The SYS light blinks during system testing andinitialization and then stays on when the system is ready.

1. Launch your web browser and go to http://192.168.1.1 (the ZyWALL automatically redirects you to https:// 192.168.1.1).

Ele Edit View Favorites Tools Help | ext - + : © [à À] search GFavort|

address | http://192.168.1.1

2. Click Yes b proceed if ET «|

you get a security alert or certificate screen. #

Information you exchange with this ste cannot be viewed or changed by others. However, there is a problem with the sites secunly certificate.

The security certficate was issued by à company you have not chosen ta trust. View the certificate to determine whether you want to trust the cerifing authority.

© The secuity certificate date is valid

4 The name on the security certicate is invalid or does not match the name of the site

Do you want to proceed?

3. Enter admin as the user name and 1234 as the password. Click Login.

4. ltis strongly recommended that you change the password. Type and retype a new password, and click Apply.

Installation Setup Wizard

The Status screen opens. Click the Wizard icon in the upper right corner.

Serial Number: 234131340 80-009-0110014A VPN Status: di Interface MAC Address Range: — 00:00:22:77:86:47 = 4d DHCP Table:

Use an installation setup wizard to connect to the Internet and register the ZyWALL and/or activate trial services, like IDP and content filter.

Use the installation wizard only for initial configuration starting from the default configuration.

Changes you make in the installation wizard may not be applied if you have already changed the ZyWALL's configuration.

+ INSTALLATION SETUP, ONE ISP sets up a single Internet connection for ge2.

TALLATION SETUP, TWO 1

+ INSTALLATION SETUP, TWO ISP sets up Internet connections for

The wizard screens vary depending on the encapsulation type you use. Refer to information provided by your ISP and the web help screens to know what to enter in each field. You can leave fields blank if you don't have that information.

WAN IP Address Assignments

Default Settings and Port Details

The ZyWALL is configured for the following network topology by default.

RE ce e DHCP Settings ain peus Settings 1 get LAN |192.168.1.1, DHCP Protected LAN server enabled 2,3 ge2, WAN | DHCP clients Connections to the ge3 Internet 4 ge4 DMZ | 192.168.2.1, DHCP Public servers (such as server disabled web, e-mail and FTP) 5 ge5 DMZ | 192.168.3.1, DHCP Public servers (such as server disabled web, e-mail and FTP) 6 ge6 WLA | 10.59.0.1, DHCP Wireless access points N server enabled 7 ge7 None | None, DHCP server Optional disabled AUX aux None | None Auxiliary modem CONSOLE N/A None | None Local management

Label Type Description

USB USB Connect a (USB) 3G wireless card to access the Internet through a 3G network. At the time of writing, you can use the Huawei E220, E270.

P1-P7 RJ-45 Use 8-wire Category 5e or above Ethernet cables to connect routers, switches, computers, routers, access points, and so on.

AUX RS-232 | Use an RS-232 console cable to connect dial backup/dial-in modem.

CONSOLE |RS-232 | Use an RS-232 console cable to connect a local computer for command-based management.

EXTENSIO | PCMCI | Insert a wireless LAN card to use the wireless LAN feature.

N CARD A At the time of writing, you can use ZyXEL's G-170S wireless

SLOT card. You can optionally insert a 3G wireless card to access

the Internet wirelessly via a 3G network. At the time of writing, you can use a Sierra Wireless AC850, AC860, AC880 or AC881 3G wireless card.

None of the LEDs turn on.

Make sure that you have the power cord connected to the ZyWALL and plugged in to an appropriate power source. Make sure you have the ZyWALL turned on. Check all cable connections.

If the LEDs still do not turn on, you may have a hardware problem. In this case, you should contact your local vendor.

Cannot access the ZyWALL from the LAN.

Check the cable connection between the ZyWALL and your computer or switch. Refer to section for details.

Ping the ZyWALL from a LAN computer. Make sure your computer's Ethernet card is installed and functioning properly. Also make sure that its IP address is in the same subnet as the ZyWALL's.

In the computer, click Start, (AIl) Programs, Accessories and then Command Prompt. In the Command Prompt window, type “ping” followed by the ZyWALL's LAN IP address (192.168.1.1 is the default) and then press [ENTER]. The ZyWALL should reply.

If you've forgotten the ZyWALL's password, use the RESET button. Press the button in for about 5 seconds (or until the PWR LED starts to blink), then release it. It returns the ZyWALL to the factory defaults (password is 1234, LAN IP address 192.168.1.1 etc.; see your User's Guide for details).

If you've forgotten the ZyWALL's IP address, you can use the commands through the console port to check it. Connect your computer to the CONSOLE port using a console cable. Your computer should have a terminal emulation communications program (such as HyperTerminal) set to VT100 terminal emulation, no parity, 8 data bits, 1 stop bit, no flow control and 115200 bps port speed.

Cannot access the Internet.

Check the ZyWALL's connection to the Ethernet jack with Internet access. Make sure the Internet gateway device (such as a DSL modem) is working properly.

Check ge2's status in the Status screen. Use the installation setup wizard again and make sure that you enter the correct settings.

Procedure to View a Products Certification(s)

1. Go to www.zyxel.com.

2. Select your product from the drop-down list box on the ZyXEL home page to go to that product's page.

3. Select the certification you wish to view from this page.

Prüfen des Packungsinhalts

j il î The security cercle was issued by a company you have erscheint, kicken Sie s not chosen to trust. View the certificate to determine whether auf Ja, um you want Lo trust the certifping author. fortzufahren.

© The secuity certificate date is valid

4 The name on the security certicate is invalid or does not match the name of the site

Do you want to proceed?

2. Haga clic en Si para continuar si se ha abierto una pantalla de alerta de seguridad o certificado.

ECTS = ras Information you exchange with this site cannot be viewed or

changed by others. However, there is a problem with the sites secunly certificate.

The security certficate was issued by à company you have not chosen ta trust. View the certificate to determine whether you want to trust the cerifing authority.

© The secuity certificate date is valid

4 The name on the security certicate is invalid or does not match the name of the site

Do you want to proceed?

2. Cliquez sur Oui pour continuer si vous recevez une alerte de sécurité ou un écran de certificat.

ECTS = ras Information you exchange with this site cannot be viewed or

changed by others. However, there is a problem with the sites secunly certificate.

The security certficate was issued by à company you have not chosen ta trust. View the certificate to determine whether you want to trust the cerifing authority.

© The secuity certificate date is valid

4 The name on the security certicate is invalid or does not match the name of the site

Do you want to proceed?

i Th ity certificate d hi schermata per i À dan nat Vente cases 6 conte mate certificato. you went lo trust the certiying authority

© The secuity certificate date is valid

4 The name on the security certicate is invalid or does not match the name of the site

Do you want to proceed?

address | http://192.168.1.1

2. L+i1UT1 880 RHBEARTÈN 15, Yes (I&L\) ÆT)YyILTÉA Tél

ECTS = ras Information you exchange with this site cannot be viewed or

changed by others. However, there is a problem with the sites secunly certificate.

The security certficate was issued by à company you have not chosen ta trust. View the certificate to determine whether you want to trust the cerifing authority.

© The secuity certificate date is valid

4 The name on the security certicate is invalid or does not match the name of the site

Do you want to proceed?

WAN IP Address Assignments

Information you exchange with this ste cannot be viewed or changed by others. However, there is a problem with the sites

secunly certificate.

NOTEHLMANIEHO The security cercle was issued by a company you have

HeGesonacH bIX a not chosen ta trust. View the certificate to determine whether onepaLuü unu npyema you went lo trust the certiying authority CepTHDUKATOB ANA @ The secuity certificate date is valid. npononxeHua HaxmMyrTe Yes. AY The name on the security certificate is invalid or does not

match the name of the site

Do you want to proceed?

WAN IP Address Assignments

Her aocryna 8 WHrepHeT.

Bic RU LRKE NT PRET. A EI SRE.

2. FROENIREME RSBSE MER "DURRBET -

ECTS = ras Information you exchange with this site cannot be viewed or

changed by others. However, there is a problem with the sites security certificate.

AY The secuity certificate was issued by a company you have not chosen ta trust. View the certificate to determine whether you want to trust the cerifing authority.

© The secuity certificate date is valid

The name on the security certificate is invalid or does not

match the name of the ste Do you want ta proceed? Yes View Certficate

3. A admin {F5 RER TT RSS 1234 #5 ET

Assignment: pass I LNER DE REINE ZNALL FÉUIÉ SX FÉERIESHERS Li Gipe