Home » ZyXEL Manuals » Network Security & Firewall Devices » ZyXEL USG 200/100-PLUS/100/50 » Manual Viewer

ZyXEL USG 200/100-PLUS/100/50 User Guide - Page 60

Enable, IPv4 / IPv6 Mode, Manual Configuration, Interface Parameters

View all ZyXEL USG 200/100-PLUS/100/50 manuals

Add to My Manuals
Save this manual to your list of manuals

Page 60 highlights

Chapter 5 WAN/Internet Table 8 WAN Internet > WAN Setup > Add/Edit: Routing Mode (continued) LABEL DESCRIPTION Link-layer Address Enterprise Number Identifier Option 125 6RD Enter the VPN2S's hardware address, that is the MAC address. Enter the vendor's registered private enterprise number. An enterprise number is a unique number that identifies a company. Enter a unique identifier assigned by the vendor. Select this to have the VPN2S automatically generate and add vendor specific parameters in the DHCP discovery packets that go to the DHCP server. Enable IPv6 rapid deployment to tunnel IPv6 traffic from the local network through the ISP's IPv4 network. Automatically configured by DHCPC Manual Configuration Service Provider IPv6 Prefix IPv4 Mask Length Border Relay IPv4 Address VLAN Enable 802.1p The 6RD (IPv6 rapid deployment) fields display when you set the IPv4 / IPv6 Mode field to IPv4 Only. Select this to have the VPN2S detect IPv4 address automatically through DHCP. This option is configurable only when you set the method of encapsulation to IPoE. Select this to manually configure an IPv4 address of the relay server. Enter an IPv6 prefix for tunneling IPv6 traffic to the ISP's Border Relay router and connecting to the native IPv6 Internet. Enter the subnet mask number (1~32) for the IPv4 network. When you select Manual Configuration, specify the relay server IPv4 address. Select this option to add the VLAN tag (specified below) to the outgoing traffic through this connection. IEEE 802.1p defines up to 8 separate traffic types by inserting a tag into a MAC-layer frame that contains bits to define class of service. Select the IEEE 802.1p priority level (from 0 to 7) to add to traffic through this connection. The greater the number, the higher the priority level. VLAN ID Type the VLAN ID number (from 1 to 4094) for traffic through this connection. Interface Parameters Egress Bandwidth Enter the maximum amount of traffic, in kilobits per second, the VPN2S can send through the interface to the network. Allowed values are 0 - 1048576. Ingress Bandwidth This is reserved for future use. Enter the maximum amount of traffic, in kilobits per second, the VPN2S can receive from the network through the interface. Allowed values are 0 - 1048576. MTU Enter the MTU (Maximum Transfer Unit) size for this traffic. Connectivity Check Enable Connectivity Check Type the maximum size of each data packet, in bytes, that can move through this interface. If a larger packet arrives, the VPN2S divides it into smaller fragments. Allowed values are 68 -1492. Usually, this value is 1500. The interface can regularly check the connection to the gateway you specified to make sure it is still available. You specify how often the interface checks the connection, how long to wait for a response before the attempt is a failure, and how many consecutive failures are required before the VPN2S stops routing to the gateway. The VPN2S resumes routing to the gateway the first time the gateway passes the connectivity check. Select this to turn on the connection check. VPN2S User's Guide 60

Section	Page
VPN2S	1
Document Conventions	3
Contents Overview	4
Table of Contents	5
User’s Guide	13
Introducing the VPN2S	14
1.1 Overview	14
1.2 Registration at myZyxel	14
1.3 Ways to Manage the VPN2S	15
1.4 Good Habits for Managing the VPN2S	16
1.5 Applications for the VPN2S	16
1.5.1 Internet Access	16
1.5.2 VPN2S’s USB Support	17
1.5.3 IPv6 Routing	18
1.5.4 VPN Connectivity	18
1.5.5 Load Balancing	19
1.6 LEDs (Lights)	19
1.7 The RESET Button	21
The Web Configurator	22
2.1 Overview	22
2.1.1 Accessing the Web Configurator	22
2.2 Web Configurator Layout	24
2.2.1 Title Bar	25
2.2.2 Navigation Panel	25
2.2.3 Main Window	28
Wizard	29
3.1 Overview	29
3.2 Wizard Basic Setup	30
3.3 Wizard IPsec VPN Setup	35
3.3.1 VPN Express Settings	36
3.3.2 VPN Advanced Settings	38
3.4 Wizard IPv6 Setup	43
Technical Reference	47
Dashboard	48
4.1 Overview	48
4.2 The Dashboard Screen	48
WAN/Internet	51
5.1 Overview	51
5.1.1 What You Can Do in this Chapter	52
5.1.2 What You Need to Know	52
5.1.3 Before You Begin	54
5.2 The WAN Status Screen	55
5.3 The WAN Setup Screen	55
5.3.1 Internet Connection: Add/Edit	56
5.4 The Mobile Screen	64
5.5 The Port Setting Screen	68
5.6 The Multi-WAN Screen	69
5.6.1 Multi-WAN: Edit	70
5.6.2 How to Configure Multi-WAN for Load Balancing and Failover	71
5.7 The Dynamic DNS screen	72
5.7.1 Dynamic DNS: Add/Edit	73
5.8 Technical Reference	75
LAN	78
6.1 Overview	78
6.1.1 What You Can Do in this Chapter	78
6.1.2 What You Need To Know	79
6.1.3 Before You Begin	80
6.2 The LAN Status Screen	80
6.3 The LAN Setup Screen	81
6.3.1 LAN Setup: Edit	82
6.3.2 LAN Setup IPv6: Edit	84
6.4 The Static DHCP Screen	87
6.4.1 Static DHCP: Add/Edit	87
6.5 The Additional Subnet Screen	89
6.6 The Wake on LAN Screen	89
6.6.1 Wake On LAN: Add/Edit	90
6.7 The VLAN / Interface Group Screen	91
6.7.1 VLAN / Interface Group: Add/Edit	92
6.8 The DNS Entry Screen	97
6.9 The DNS Forwarder Screen	97
6.9.1 DNS Forwarder: Add/Edit	98
6.10 Technical Reference	99
6.10.1 LANs, WANs and the VPN2S	99
6.10.2 DHCP Setup	99
6.10.3 DNS Server Addresses	100
6.10.4 LAN TCP/IP	100
Routing	102
7.1 Overview	102
7.1.1 What You Can Do in this Chapter	102
7.2 The Routing Status Screen	103
7.3 The Policy Route Screen	109
7.3.1 Policy Route: Add/Edit	110
7.4 The Static Route Screen	112
7.4.1 Static Route: Add/Edit	113
7.5 The RIP Screen	114
Network Address Translation (NAT)	116
8.1 Overview	116
8.1.1 What You Can Do in this Chapter	116
8.1.2 What You Need To Know	116
8.2 The Port Forwarding Screen	117
8.2.1 Port Forwarding: Add/Edit	119
8.3 The Port Triggering Screen	120
8.3.1 Port Triggering Rule: Add/Edit	122
8.4 The Address Mapping Screen	123
8.4.1 Address Mapping Rule: Add/Edit	124
8.5 The Default Server Screen	125
8.5.1 Default Server: Edit	126
8.6 The ALG Screen	127
8.7 Technical Reference	128
8.7.1 NAT Definitions	128
8.7.2 What NAT Does	128
8.7.3 How NAT Works	129
8.7.4 NAT Application	129
Firewall	132
9.1 Overview	132
9.1.1 What You Can Do in this Chapter	132
9.1.2 What You Need to Know	133
9.2 The Firewall Overview Screen	134
9.3 The DoS Screen	134
9.4 The Firewall Rules Screen	135
9.4.1 Firewall Rule: Add/Edit	136
9.5 The Device Service Screen	138
9.5.1 Device Service: Edit	140
9.5.2 Trust Domain: Add/Edit	140
9.6 The Zone Control Screen	141
9.7 The Service Screen	142
9.7.1 Service: Add/Edit	143
9.8 The MAC Filter Screen	144
9.8.1 MAC Filter: Add/Edit	145
9.9 The Certificate Screen	146
9.10 The AAA Server	147
9.10.1 LDAP Server: Add/Edit	148
9.10.2 RADIUS Server: Add/Edit	150
Security Service	152
10.1 Overview	152
10.1.1 What You Can Do in This Chapter	152
10.1.2 What You Need to Know	152
10.2 The Content Filter Screen	153
10.2.1 Content Filter: Add/Edit	156
VPN	160
11.1 Overview	160
11.2 What You Can Do in this Chapter	160
11.3 What You Need to Know	160
11.4 The VPN Status Screen	163
11.5 The IPsec VPN Screen	164
11.5.1 VPN Gateway: Add/Edit	166
11.5.2 VPN Connection: Add/Edit	172
11.5.3 The Default_L2TP_VPN_GW IPsec VPN Rule	175
11.5.4 PPTP VPN Troubleshooting Tips	176
11.6 The PPTP VPN Screen	177
11.6.1 PPTP VPN Troubleshooting Tips	179
11.7 The L2TP VPN Screen	180
11.7.1 L2TP Setup - Server	180
11.7.2 L2TP Setup - Client	182
11.7.3 L2TP VPN Troubleshooting Tips	183
11.8 The L2TP Client Status Screen	186
11.9 The GRE VPN Screen	187
11.9.1 GRE VPN: Add/Edit	188
11.10 Technical Reference	189
11.10.1 IPsec Architecture	189
11.10.2 Encapsulation	190
11.10.3 IKE Phases	191
11.10.4 Negotiation Mode	192
11.10.5 IPsec and NAT	192
11.10.6 VPN, NAT, and NAT Traversal	193
11.10.7 ID Type and Content	194
11.10.8 Pre-Shared Key	195
11.10.9 Diffie-Hellman (DH) Key Groups	195
Bandwidth Management	196
12.1 Overview	196
12.1.1 What You Can Do in this Chapter	196
12.1.2 What You Need to Know	196
12.2 The General Screen	198
12.3 The Queue Setup Screen	199
12.3.1 QoS Queue: Add/Edit	201
12.4 The Classification Setup Screen	202
12.4.1 QoS Class: Add/Edit	203
12.5 The Policer Setup Screen	206
12.5.1 QoS Policer: Add/Edit	207
12.6 The Shaper Setup Screen	208
12.6.1 QoS Shaper: Add/Edit	209
12.7 Technical Reference	210
Network Management	214
13.1 Overview	214
13.1.1 What You Can Do in This Chapter	214
13.2 The SNMP Screen	214
System	217
14.1 Overview	217
14.1.1 What You Can Do in This Chapter	217
14.2 The Scheduler Rule Screen	217
14.2.1 Scheduler Rule: Add/Edit	218
Log / Report	219
15.1 Overview	219
15.1.1 What You Can Do in this Chapter	219
15.1.2 What You Need To Know	219
15.2 The Log Viewer Screen	220
15.3 Log Settings	221
15.3.1 Log on USB Settings: Edit	222
15.3.2 System and Email: Edit	224
15.3.3 Remote Server Log Settings: Edit	226
Service / License	229
16.1 Overview	229
16.2 The License Screen	229
Device Name	231
17.1 Overview	231
17.2 The Device Name Screen	231
Host Name List	233
18.1 Overview	233
18.2 The Host Name List Screen	233
18.2.1 Add Host Name	233
Date / Time	235
19.1 Overview	235
19.2 The Date / Time Screen	235
User Account	238
20.1 Overview	238
20.2 What You Can Do in this Chapter	238
20.3 The User Account Screen	238
20.3.1 Users Account: Add/Edit	239
USB Storage	241
21.1 Overview	241
21.1.1 What You Need To Know	241
21.1.2 Before You Begin	242
21.2 The USB Storage Screen	242
21.2.1 Add a USB Share	244
Diagnostic	245
22.1 Overview	245
22.1.1 What You Can Do in this Chapter	245
22.2 The Network Tools Screen	245
22.3 The Packet Capture Screen	246
Firmware Upgrade	249
23.1 Overview	249
23.2 The Firmware Screen	249
23.3 The Mobile Profile Screen	251
Backup / Restore	253
24.1 Overview	253
24.2 The Backup / Restore Screen	253
Language	255
25.1 Overview	255
25.2 The Language Screen	255
Restart / Shutdown	256
26.1 Overview	256
26.2 The Restart / Shutdown Screen	256
Troubleshooting	257
27.1 Power, Hardware Connections, and LEDs	257
27.2 VPN2S Access and Login	258
27.3 Internet Access	260
27.4 VPN2S Configuration	261
Customer Support	265
Legal Information	271

Match case Limit results 1 per page

Chapter 5 WAN/Internet

VPN2S User’s Guide

Link-layer

Address

Enter the VPN2S’s hardware address, that is the MAC address.

Enterprise

Number

Enter the vendor’s registered private enterprise number. An enterprise number is a unique

number that identifies a company.

Identifier

Enter a unique identifier assigned by the vendor.

Option 125

Select this to have the VPN2S automatically generate and add vendor specific parameters in

the DHCP discovery packets that go to the DHCP server.

6RD

Enable

IPv6 rapid deployment to tunnel IPv6 traffic from the local network through the ISP’s IPv4

network.

The 6RD (IPv6 rapid deployment) fields display when you set the

IPv4 / IPv6 Mode

field to

IPv4

Only

Automatically

configured by

DHCPC

Select this to have the VPN2S detect IPv4 address automatically through DHCP.

This option is configurable only when you set the method of encapsulation to

IPoE

Manual

Configuration

Select this to manually configure an IPv4 address of the relay server.

Service Provider

IPv6 Prefix

Enter an IPv6 prefix for tunneling IPv6 traffic to the ISP’s Border Relay router and connecting to

the native IPv6 Internet.

IPv4 Mask

Length

Enter the subnet mask number (1~32) for the IPv4 network.

Border Relay

IPv4 Address

When you select

Manual Configuration

, specify the relay server IPv4 address.

VLAN

Enable

Select this option to add the VLAN tag (specified below) to the outgoing traffic through this

connection.

802.1p

IEEE 802.1p defines up to 8 separate traffic types by inserting a tag into a MAC-layer frame that

contains bits to define class of service.

Select the IEEE 802.1p priority level (from 0 to 7) to add to traffic through this connection. The

greater the number, the higher the priority level.

VLAN ID

Type the VLAN ID number (from 1 to 4094) for traffic through this connection.

Interface Parameters

Egress

Bandwidth

Enter the maximum amount of traffic, in kilobits per second, the VPN2S can send through the

interface to the network. Allowed values are 0 - 1048576.

Ingress

Bandwidth

This is reserved for future use.

Enter the maximum amount of traffic, in kilobits per second, the VPN2S can receive from the

network through the interface. Allowed values are 0 - 1048576.

MTU

Enter the MTU (Maximum Transfer Unit) size for this traffic.

Type the maximum size of each data packet, in bytes, that can move through this interface. If a

larger packet arrives, the VPN2S divides it into smaller fragments. Allowed values are 68 -1492.

Usually, this value is 1500.

Connectivity

Check

The interface can regularly check the connection to the gateway you specified to make sure it

is still available. You specify how often the interface checks the connection, how long to wait for

a response before the attempt is a failure, and how many consecutive failures are required

before the VPN2S stops routing to the gateway. The VPN2S resumes routing to the gateway the

first time the gateway passes the connectivity check.

Enable

Connectivity

Check

Select this to turn on the connection check.

Table 8

WAN Internet > WAN Setup > Add/Edit: Routing Mode (continued)

LABEL

DESCRIPTION