Производительный центр безопасности ZYXEL ZyWALL USG 1000. Инструкция на английском языке

ZyWALL USG Series
Unified Security Gateway
Version 3.30
Edition 2, 9/2013
Quick Start Guide
User’s Guide
Default Login Details
LAN IP Address        http://192.168.1.1
User Name                   admin
www.zyxel.com
Password                     1234
Copyright © 2013 ZyXEL Communications Corporation

IMPORTANT!
READ CAREFULLY BEFORE USE.
KEEP THIS GUIDE FOR FUTURE REFERENCE.
Screenshots and graphics in this book may differ slightly from your product due to differences in
your product firmware or your computer operating system. Every effort has been made to ensure
that the information in this manual is accurate.
Related Documentation
•Quick Start Guide
The Quick Start Guide shows how to connect the ZyWALL and access the Web Configurator
wizards. (See the wizard real time help for information on configuring each screen.) It also
contains a connection diagram and package contents list.
• CLI Reference Guide
The CLI Reference Guide explains how to use the Command-Line Interface (CLI) to configure the
ZyWALL.
Note: It is recommended you use the Web Configurator to configure the ZyWALL.
• Web Configurator Online Help
Click the help icon in any screen for help in configuring that screen and supplementary information.
2                                                                   ZyWALL USG 20-2000 User’s Guide

Contents
Contents
Introduction...........................................................................................................................................5
1.1 Overview  .............................................................................................................................................5
1.2 Default Zones, Interfaces, and Ports ...................................................................................................8
1.3 Management Overview  .......................................................................................................................9
1.4 Web Configurator ..............................................................................................................................10
1.5 Stopping the ZyWALL  .......................................................................................................................20
1.6 Rack-mounting ..................................................................................................................................20
1.8 Front Panel ........................................................................................................................................22
How to Set Up Your Network .............................................................................................................29
2.1 Wizard Overview ...............................................................................................................................29
2.2 How to Configure Interfaces, Port Roles, and Zones ........................................................................29
2.3 How to Configure a Cellular Interface  ...............................................................................................32
2.4 How to Set Up a Wireless LAN .........................................................................................................34
2.5 How to Configure Ethernet, PPP, VLAN, Bridge and Policy Routing  ................................................37
2.6 How to Set Up IPv6 Interfaces For Pure IPv6 Routing  .....................................................................38
2.7 How to Set Up an IPv6 6to4 Tunnel ..................................................................................................44
2.8 How to Set Up an IPv6-in-IPv4 Tunnel  .............................................................................................48
Protecting Your Network....................................................................................................................53
3.1 Firewall ..............................................................................................................................................53
3.2 User-aware Access Control  ..............................................................................................................54
3.3 Endpoint Security (EPS)  ...................................................................................................................55
3.4 Device and Service Registration .......................................................................................................55
3.5 Anti-Virus Policy Configuration ..........................................................................................................56
3.6 IDP Profile Configuration ...................................................................................................................58
3.7 ADP Profile Configuration  .................................................................................................................59
3.8 Content Filter Profile Configuration ...................................................................................................61
3.9 Viewing Content Filter Reports  .........................................................................................................63
3.10 Anti-Spam Policy Configuration .......................................................................................................66
Create Secure Connections Across the Internet .............................................................................69
4.1 IPSec VPN  ........................................................................................................................................69
4.2 VPN Concentrator Example ..............................................................................................................71
4.3 Hub-and-spoke IPSec VPN Without VPN Concentrator ...................................................................73
4.4 ZyWALL IPSec VPN Client Configuration Provisioning  ....................................................................75
4.5 SSL VPN ...........................................................................................................................................77
4.6 L2TP VPN with Android, iOS, and Windows .....................................................................................79
4.7 One-Time Password Version 2 (OTPv2) ...........................................................................................92
Managing Traffic ................................................................................................................................95
ZyWALL USG 20-2000 User’s Guide                                                                 3