ZyXEL ZYWALL USG 200 User Guide - Page 93
Interface Types
View all ZyXEL ZYWALL USG 200 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 93 highlights
Chapter 6 Configuration Basics Table 12 Zones, Interfaces, and Physical Ethernet Ports Zones (WAN, OPT, LAN, DMZ) A zone is a group of interfaces and VPN tunnels. Use zones to apply security settings such as firewall, IDP, remote management, antivirus, and application patrol. You can change the opt interface to be part of a different zone. Interfaces (Ethernet, VLAN,...) Interfaces are logical entities that (layer-3) packets pass through. Use interfaces in configuring VPN, zones, trunks, device HA, DDNS, policy routes, static routes, HTTP redirect, and NAT. Port roles combine physical ports into interfaces. Physical Ethernet Ports (P1, P2, ...) The physical port is where you connect a cable. In configuration, you use physical ports when configuring port groups. You use interfaces and zones in configuring other features. 6.2.1 Interface Types There are many types of interfaces in the ZyWALL. In addition to being used in various features, interfaces also describe the network that is directly connected to the ZyWALL. • Ethernet interfaces are the foundation for defining other interfaces and network policies. You also configure RIP and OSPF in these interfaces. • Port groups create a hardware connection between physical ports at the layer2 (data link, MAC address) level. Port groups are created when you use the Interface > Port Roles screen to set multiple physical ports to be part of the same (lan1, ext-wlan or dmz) interface. • PPP interfaces support Point-to-Point Protocols (PPPoE or PPTP). ISP accounts are required for PPPoE/PPTP interfaces. • VLAN interfaces recognize tagged frames. The ZyWALL automatically adds or removes the tags as needed. Each VLAN can only be associated with one Ethernet interface. • Bridge interfaces create a software connection between Ethernet or VLAN interfaces at the layer-2 (data link, MAC address) level. Then, you can configure the IP address and subnet mask of the bridge. It is also possible to configure zone-level security between the member interfaces in the bridge. • Virtual interfaces increase the amount of routing information in the ZyWALL. There are three types: virtual Ethernet interfaces (also known as IP alias), virtual VLAN interfaces, and virtual bridge interfaces. • The auxiliary interface, along with an external modem, provides an interface the ZyWALL can use to dial out. This interface can be used as a backup WAN interface, for example. The auxiliary interface controls the AUX port. ZyWALL USG 100/200 Series User's Guide 93