Zyxel-communications 10 Manuel d'utilisateur Page 359
- Page / 495
- Table des matières
- DEPANNAGE
- MARQUE LIVRES
Noté. / 5. Basé sur avis des utilisateurs
ZyWALL 10~100 Series Internet Security Gateway
VPN/IPSec Setup 29-1
Chapter 29
VPN/IPSec Setup
This chapter introduces the VPN SMT menus. See the Logs chapter and the appendices for
information on IPSec logs.
29.1 VPN/IPSec Setup
The VPN/IPSec main SMT menu has these main submenus:
1. Define VPN policies in menu 27.1 submenus, including security policies, endpoint IP addresses,
peer IPSec router IP address and key management.
2. Menu 27.2 - SA Monitor allows you to manage (refresh or disconnect) your SA connections.
This is an overview of the VPN menu tree.
Figure 29-1 VPN SMT Menu Tree
From the main menu, enter 27 to display the first VPN menu (shown next).
- ZyWALL 10/10W/50/100 1
- Copyright 2
- Interference Statement 3
- Caution 4
- ZyXEL Limited Warranty 5
- Customer Support 6
- Table of Contents 7
- List of Figures 16
- List of Tables 25
- Preface 30
- Part I: 33
- Chapter 1 35
- Getting to Know Your ZyWALL 35
- 1.2.1 Physical Features 36
- 1.2.2 Non-Physical Features 37
- 1.2.3 ZyWALL 100 Note 41
- 1.3.2 VPN Application 43
- Chapter 2 45
- Hardware Installation 45
- Hardware Installation 2-3 47
- Table 2-1 LED Descriptions 47
- UPLINK button “off” (out) 51
- Part II: 55
- Chapter 3 57
- Initial Setup 57
- Enter Password : XXXX 58
- 3.2.1 Main Menu 59
- 3-4 Initial Setup 60
- Table 3-2 Main Menu Summary 60
- 3-6 Initial Setup 62
- 3.4 Resetting the ZyWALL 64
- Chapter 4 65
- SMT Menu 1 - General Setup 65
- 4.3 General Setup 66
- Chapter 5 69
- WAN and Dial Backup Setup 69
- 5.3 Dial Backup 70
- 5.5 Advanced WAN Setup 72
- 5.6.1 Metric 74
- 5.8 Editing PPP Options 77
- 5.9 Editing TCP/IP Options 79
- 5.10 Editing Login Script 80
- 5.11 Remote Node Filter 82
- Chapter 6 85
- LAN Setup 85
- 6.3 TCP/IP and LAN DHCP 86
- Private IP Addresses 87
- 6.3.4 RIP Setup 88
- 6.3.5 IP Multicast 88
- 6.3.6 IP Alias 89
- 6.4.1 IP Alias Setup 92
- 6.5 Wireless LAN 94
- 6.6 Wireless LAN Setup 95
- Chapter 7 99
- Wireless LAN Security Setup 99
- 7.3 Network Authentication 101
- 7.5 MAC Address Filtering 108
- DESCRIPTION 109
- Chapter 8 111
- DMZ Setup 111
- 8.2 DMZ Port Filter Setup 112
- 8.3 TCP/IP Setup 112
- 8.3.2 IP Alias Setup 113
- Chapter 9 115
- Internet Access 115
- 9.1.2 PPTP Encapsulation 116
- 9.1.4 PPPoE Encapsulation 118
- 9.2 Basic Setup Complete 119
- Part III: 121
- Chapter 10 123
- Remote Node Setup 123
- 10.2 Remote Node Profile 124
- 10.2.2 PPPoE Encapsulation 125
- 10.2.3 PPTP Encapsulation 127
- 10-8 Remote Node Setup 130
- 10-10 Remote Node Setup 132
- 10.4 Remote Node Filter 133
- 10.5 Traffic Redirect 134
- Remote Node Setup 10-15 137
- Chapter 11 139
- IP Static Route Setup 139
- 11.1 IP Static Route Setup 140
- Chapter 12 143
- 12.1.2 What NAT Does 144
- 12.1.3 How NAT Works 144
- NAT 12-3 145
- Figure 12-1 How NAT Works 145
- 12.1.4 NAT Application 146
- 12.1.5 NAT Mapping Types 146
- 12.2 Using NAT 148
- 12.3 NAT Setup 150
- 12.3.1 Address Mapping Sets 151
- FIELD DESCRIPTION EXAMPLE 153
- SERVICES PORT NUMBER 156
- Telnet 23 156
- 12.5 General NAT Examples 159
- Part IV: 171
- Chapter 13 173
- Firewalls 173
- 13.4 Denial of Service 175
- 13.4.2 Types of DoS Attacks 176
- 5 REDIRECT 178
- 13 TIMESTAMP_REQUEST 178
- 14 TIMESTAMP_REPLY 178
- 17 ADDRESS_MASK_REQUEST 178
- 18 ADDRESS_MASK_REPLY 178
- 13.5 Stateful Inspection 179
- 13.5.3 TCP Security 182
- 13.5.4 UDP/ICMP Security 182
- 13.5.5 Upper Layer Protocols 183
- 13.6.1 Security In General 184
- 13.7.1 Packet Filtering: 185
- 13.7.2 Firewall 185
- Chapter 14 187
- Chapter 15 189
- 15.3 Attack Alert 190
- 15.3.1 Threshold Values 191
- 15.3.2 Half-Open Sessions 191
- Table 15-1 Attack Alert 194
- Chapter 16 197
- Creating Custom Rules 197
- 16.2 Rule Logic Overview 198
- 16.3.1 LAN to WAN Rules 200
- 16.3.2 WAN to LAN Rules 200
- 16.4 Rule Summary 201
- 16.5 Predefined Services 204
- 16.6 Custom Ports 211
- Select WAN to LAN from the 213
- Chapter 17 219
- Content Filtering 219
- Content Filtering 17-3 221
- 17-4 Content Filtering 222
- 17.2 Free 223
- 17-6 Content Filtering 224
- 17.3 iCard 225
- 17.4 List Update 226
- 17.5 Exempt Computers 228
- 17.6 Customizing 229
- Content Filtering 17-13 231
- 17.7 Domain Name 232
- Content Filtering 17-15 233
- Part V: 235
- Chapter 18 237
- Centralized Logs 237
- 18-2 Centralized Logs 238
- Figure 18-1 View Log 238
- Table 18-1 View Log 238
- 18.2 Log Settings 239
- Centralized Logs 18-5 241
- Chapter 19 243
- Filter Configuration 243
- Outgoing 244
- Filter Rule 245
- Filter Set 245
- 19.2.2 TCP/IP Filter Rule 248
- 19-8 Filter Configuration 250
- Filter Configuration 19-9 251
- 19-10 Filter Configuration 252
- 19.2.3 Generic Filter Rule 253
- 19-12 Filter Configuration 254
- 19.3 Example Filter 255
- 19.4 Filter Types and NAT 258
- 19.5 Firewall 258
- 19.6.1 LAN Filters 259
- 19.6.2 DMZ Filters 259
- 19.6.3 Remote Node Filters 260
- Chapter 20 261
- SNMP Configuration 261
- 20.2 Supported MIBs 263
- 20.3 SNMP Configuration 263
- 20.4 SNMP Traps 264
- Part VI: 265
- Chapter 21 267
- 1. System Information 269
- 2. Console Port Speed 269
- 21.2.1 System Information 270
- 21.3 Log and Trace 271
- 21.3.2 UNIX Syslog 272
- 3. Filter log 275
- 4. PPP log 275
- 5. Firewall log 275
- 21.4 Diagnostic 276
- 21.4.1 WAN DHCP 277
- Chapter 22 279
- Maintenance 279
- 22.2 Backup Configuration 280
- 22.2.1 Backup Configuration 281
- 22.2.4 GUI-based FTP Clients 282
- 22.2.7 TFTP Command Example 284
- 22.3 Restore Configuration 286
- 22.4.1 Firmware File Upload 290
- 22.4.5 TFTP File Upload 292
- Choose the Xmodem protocol 295
- Then click Send 295
- Part VII: 299
- Chapter 23 301
- 23.2 Call Control Support 302
- 23.2.1 Budget Management 303
- 23.2.2 Call History 304
- 23.3 Time and Date Setting 305
- 23.3.1 Resetting the Time 307
- Chapter 24 309
- Remote Management 309
- 24.3 FTP 310
- 24.4 Web 310
- 24.5 SNMP 310
- 24.6 DNS 310
- 24.7 Remote Management 310
- 24.9 System Timeout 313
- Part VIII: 315
- Chapter 25 317
- Bandwidth Management 317
- 25.5 Scheduler 320
- 25.7 Bandwidth Borrowing 324
- Bandwidth Manager Summary 327
- FIELD DESCRIPTION 330
- Part IX: 335
- Chapter 26 337
- IP Policy Routing 337
- IP Policy Routing 26-5 341
- Table 26-2 IP Routing Policy 341
- 26.5 Applying an IP Policy 342
- 26-10 IP Policy Routing 346
- Chapter 27 347
- Call Scheduling 347
- 27-4 Call Scheduling 350
- Call Scheduling 27-5 351
- Chapter 28 353
- Introduction to IPSec 353
- 28.1.5 VPN Applications 354
- 28.2 IPSec Architecture 355
- 28.2.1 IPSec Algorithms 356
- 28.2.2 Key Management 356
- 28.3 Encapsulation 357
- 28.4 IPSec and NAT 357
- Chapter 29 359
- VPN/IPSec Setup 359
- 29.2 IPSec Algorithms 360
- 29.3 IPSec Summary 361
- 29.3.2 ID Type and Content 362
- 29.3.3 My IP Address 364
- VPN/IPSec Setup 29-9 367
- 29-10 VPN/IPSec Setup 368
- 29.4 IPSec Setup 369
- VPN/IPSec Setup 29-13 371
- 29-14 VPN/IPSec Setup 372
- VPN/IPSec Setup 29-15 373
- 29-16 VPN/IPSec Setup 374
- 29.5 IKE Setup 375
- 29.5.2 Negotiation Mode 376
- 29.5.3 Pre-Shared Key 376
- 29-20 VPN/IPSec Setup 378
- 29.6 Manual Setup 379
- VPN/IPSec Setup 29-23 381
- Chapter 30 383
- SA Monitor 383
- 30-2 SA Monitor 384
- Part X: 385
- Chapter 31 387
- Troubleshooting 387
- 31-2 Troubleshooting 388
- Troubleshooting 31-3 389
- Part XI: 391
- Appendix A 393
- Windows 2000/NT/XP 396
- Macintosh OS 8/9 400
- Macintosh OS X 402
- Appendix B 404
- Triangle Route 404
- IP Aliasing 405
- Gateways on the WAN Side 406
- Appendix C 407
- The Big Picture 407
- Appendix D 408
- Appendix E 412
- Client computer 413
- Appendix F 415
- How PPPoE Works 416
- ZyWALL as a PPPoE Client 416
- Appendix G 417
- PPTP Protocol Overview 418
- PPP Data Connection 419
- Appendix H 420
- Hardware Specifications 420
- Cable Pin Assignments 421
- 32 Hardware Specifications 424
- Appendix I 425
- Universal Plug and Play 425
- Opening UPnP 426
- DESCRIPTION 427
- Web Configurator Easy Access 431
- Appendix J 434
- IP Subnetting 434
- Subnet Masks 435
- Subnetting 435
- Example: Two Subnets 436
- Example: Four Subnets 438
- Example Eight Subnets 439
- IP Subnetting 49 441
- Appendix K 442
- Appendix L 443
- Part XII: 445
- Appendix M 447
- Command Interpreter 447
- Appendix N 448
- Firewall Commands 448
- Firewall Commands 57 449
- Chart N-1 Firewall Commands 449
- Firewall Commands 59 451
- 60 Firewall Commands 452
- Firewall Commands 61 453
- 62 Firewall Commands 454
- Appendix O 455
- NetBIOS Filter Commands 455
- NetBIOS Filter Configuration 457
- Appendix P 459
- Boot Commands 459
- Appendix Q 461
- Log Descriptions 461
- VPN/IPSec logs 471
- VPN Responder IPSec Log 472
- Log Descriptions 81 473
- Log Commands 477
- Log Command Example 478
- Appendix R 479
- Protection 479
- Part XIII: 481
Produits connexes et manuels pour Matériel Zyxel-communications 10
(78 pages)
Matériel Zyxel-communications 802.11g Wireless Firewall Router P-320W Manuel d'utilisateur
(215 pages)
(215 pages)
Matériel Zyxel-communications Internet Security Appliance ZyWALL5UTM 4.0 Manuel d'utilisateur
(803 pages)
(803 pages)
© 2020, manymanuals.fr. Tous droits réservés | 0.044 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Commentaires sur ces manuels