ZyXEL ZyWALL 2 Plus User Manual Page 294
- Page / 686
- Table of contents
- TROUBLESHOOTING
- BOOKMARKS
Rated. / 5. Based on customer reviews
Chapter 14 IPSec VPN
ZyWALL 2 Plus User’s Guide
294
14.17.3 Hub-and-spoke VPN Requirements and Suggestions
Consider the following when implementing a hub-and-spoke VPN.
The local IP addresses configured in the VPN rules cannot overlap
The hub router must have at least one separate VPN rule for each spoke. In the local IP
address, specify the IP addresses of the hub-and-spoke networks with which the spoke is to be
able to have a VPN tunnel. This may require you to use more than one VPN rule.
If you want to have the spoke routers access the Internet through the hub-and-spoke VPN
tunnel, set the VPN rules in the spoke routers to use 0.0.0.0 (any) as the remote IP address.
Make sure that your From VPN and To VPN firewall rules do not block the VPN packets.
- ZyWALL 2 Plus 1
- About This User's Guide 3
- Document Conventions 4
- Icons Used in Figures 5
- Safety Warnings 6
- Contents Overview 7
- Chapter 3 10
- Chapter 4 10
- Chapter 12 13
- Chapter 13 13
- Chapter 14 14
- Chapter 15 14
- Chapter 16 15
- Chapter 17 15
- Chapter 21 17
- Chapter 25 19
- Chapter 26 19
- Chapter 41 23
- Chapter 42 23
- Table of Contents 25
- Table of Contents 26
- List of Figures 27
- List of Tables 39
- Introduction and 45
- Registration 45
- CHAPTER 1 47
- 1.2.2 VPN Application 48
- 1.5 LEDs 49
- CHAPTER 2 51
- 2.3 Resetting the ZyWALL 53
- 2.4.1 Title Bar 54
- 2.4.2 Main Window 55
- 2.4.5 Navigation Panel 60
- Table 6 Screens Summary 61
- 2.4.6 Port Statistics 64
- 2.4.7 DHCP Table Screen 65
- 2.4.8 VPN Status 66
- 2.4.9 Bandwidth Monitor 67
- CHAPTER 3 69
- 3.2 Internet Access 70
- 3.2.1.2 PPPoE Encapsulation 71
- Chapter 3 Wizard Setup 72
- Chapter 3 Wizard Setup 73
- CHAPTER 4 89
- 3 Click the insert icon 94
- 6 Click ADVANCED > DNS 99
- Click Apply 99
- Chapter 4 Tutorials 100
- ZyWALL 2 Plus User’s Guide 100
- Chapter 4 Tutorials 101
- 2 Select Active 122
- 4 Click Apply 122
- CHAPTER 5 127
- 5.2 Registration 128
- 5.3 Service 129
- Chapter 5 Registration 130
- LAN Screens (133) 131
- Bridge Screens (145) 131
- WAN Screens (151) 131
- DMZ Screens (171) 131
- Wireless LAN (181) 131
- CHAPTER 6 133
- 6.2.1 Private IP Addresses 134
- 6.3 DHCP 135
- 6.4 RIP Setup 135
- 6.5 Multicast 135
- 6.6 WINS 136
- 6.7 LAN 136
- Chapter 6 LAN Screens 137
- Figure 92 NETWORK > LAN 137
- Table 22 NETWORK > LAN 137
- Chapter 6 LAN Screens 138
- 6.8 LAN Static DHCP 139
- 6.9 LAN IP Alias 140
- 6.10 LAN Port Roles 142
- CHAPTER 7 145
- 7.2.1 Rapid STP 146
- 7.2.2 STP Terminology 146
- 7.2.3 How STP Works 146
- 7.3 Bridge 147
- Chapter 7 Bridge Screens 148
- 7.4 Bridge Port Roles 149
- CHAPTER 8 151
- Chapter 8 WAN Screens 152
- Chapter 8 WAN Screens 153
- 8.6 WAN MAC Address 154
- 8.7 WAN 154
- 8.7.2 PPPoE Encapsulation 157
- 8.7.3 PPTP Encapsulation 160
- 8.8 Traffic Redirect 163
- 8.10 Configuring Dial Backup 165
- 8.11 Advanced Modem Setup 168
- 8.11.3 Response Strings 169
- CHAPTER 9 171
- DMZ are on separate subnets 172
- Chapter 9 DMZ Screens 173
- 9.3 DMZ Static DHCP 174
- 9.4 DMZ IP Alias 175
- 9.7 DMZ Port Roles 178
- Chapter 9 DMZ Screens 180
- CHAPTER 10 181
- Chapter 10 Wireless LAN 183
- 10.3 WLAN Static DHCP 184
- 10.4 WLAN IP Alias 185
- Chapter 10 Wireless LAN 186
- 10.5 WLAN Port Roles 187
- PART III 189
- CHAPTER 11 191
- 11.2 Packet Direction Matrix 192
- Chapter 11 Firewall 193
- Chapter 11 Firewall 194
- 11.4 Security Considerations 199
- 11.5 Firewall Rules Example 200
- 11.6 Asymmetrical Routes 201
- 11.9 Firewall Rule Summary 206
- 11.9.1 Firewall Edit Rule 208
- 11.10 Anti-Probing 211
- 11.11 Firewall Thresholds 212
- 11.12 Threshold Screen 213
- 11.13 Service 215
- 10.0.0.15 on the LAN 220
- CHAPTER 12 223
- CHAPTER 13 245
- 6 Click Submit 247
- 13.3 Web Site Submission 250
- CHAPTER 14 253
- 14.1.1 IKE SA Overview 254
- 14.2 VPN Rules (IKE) 255
- Chapter 14 IPSec VPN 256
- 14.3 IKE SA Setup 257
- Chapter 14 IPSec VPN 259
- Figure 176 VPN/NAT Example 261
- 14.4.1 SA Life Time 262
- 14.6 IPSec SA Overview 270
- 14.6.3 Active Protocol 272
- 14.6.4 Encapsulation 272
- 14.9 Network Policy Move 280
- 14.11 VPN Rules (Manual) 281
- 14.13 VPN SA Monitor 285
- 14.14 VPN Global Setting 286
- 192.168.1.0/24 287
- 0.0.0.0 287
- 14.17 Hub-and-spoke VPN 292
- CHAPTER 15 295
- 15.3 Verifying a Certificate 296
- 15.4 Configuration Summary 297
- 15.5 My Certificates 298
- Chapter 15 Certificates 299
- Chapter 15 Certificates 300
- 15.7 My Certificate Export 302
- 15.8 My Certificate Import 303
- 15.9 My Certificate Create 305
- 15.10 Trusted CAs 310
- 15.11 Trusted CA Details 312
- 15.12 Trusted CA Import 314
- 15.16 Directory Servers 320
- CHAPTER 16 323
- 16.2 Local User Database 324
- 16.3 RADIUS 326
- Advanced 329
- CHAPTER 17 331
- 17.1.2 What NAT Does 332
- 17.1.3 How NAT Works 332
- 17.1.4 NAT Application 333
- 17.1.6 NAT Mapping Types 334
- 17.2 Using NAT 335
- 17.3 NAT Overview Screen 336
- 17.4 NAT Address Mapping 337
- 17.5 Port Forwarding 340
- 17.5.4 Port Translation 341
- 17.6 Port Forwarding Screen 342
- 17.7 Port Triggering 344
- CHAPTER 18 347
- 18.2 IP Static Route 348
- Chapter 18 Static Route 349
- Chapter 18 Static Route 350
- CHAPTER 19 351
- 19.7 Scheduler 353
- 19.8 Bandwidth Borrowing 355
- 19.11 Configuring Summary 357
- Bandwidth Manager Monitor 363
- CHAPTER 20 365
- 20.4 Address Record 366
- 20.5 Name Server Record 366
- 20.6 System Screen 367
- Chapter 20 DNS 368
- Chapter 20 DNS 369
- 20.7 DNS Cache 371
- 20.8 Configure DNS Cache 371
- 20.9 Configuring DNS DHCP 372
- 20.10 Dynamic DNS 374
- ZyWALL and the DDNS server 376
- CHAPTER 21 377
- 21.2 WWW (HTTP and HTTPS) 378
- 21.3 WWW Configuration 379
- 21.4 HTTPS Example 380
- Chapter 21 Remote Management 381
- Chapter 21 Remote Management 382
- 21.4.4 Login Screen 383
- 21.5 SSH 385
- 21.6 How SSH Works 385
- 21.8 Configuring SSH 386
- 21.9.2 Example 2: Linux 388
- 21.11 Telnet 390
- 21.12 Configuring TELNET 390
- 21.13 FTP 391
- 21.14 SNMP 392
- 21.14.1 Supported MIBs 393
- 21.14.2 SNMP Traps 393
- 21.15 DNS 395
- 21.17 Configuring CNM 396
- CHAPTER 22 399
- 22.2 Configuring UPnP 400
- Chapter 22 UPnP 401
- Chapter 22 UPnP 402
- CHAPTER 23 409
- Chapter 23 Custom Application 410
- CHAPTER 24 411
- 24.2 FTP 412
- 24.3 H.323 412
- 24.4 RTP 412
- 24.5 SIP 413
- 24.6 ALG Screen 414
- Chapter 24 ALG Screen 415
- Table 131 ADVANCED > ALG 415
- Chapter 24 ALG Screen 416
- Logs and 417
- Maintenance 417
- CHAPTER 25 419
- 25.2 Log Description Example 420
- Chapter 25 Logs Screens 421
- Chapter 25 Logs Screens 422
- 25.4 Configuring Reports 425
- 25.4.1 Viewing Web Site Hits 427
- 25.4.3 Viewing Protocol/Port 428
- 25.5 Log Descriptions 430
- Table 141 System Error Logs 432
- Table 143 TCP Reset Logs 433
- Table 145 ICMP Logs 433
- Table 150 Attack Logs 435
- Table 152 IPSec Logs 437
- Table 153 IKE Logs 438
- Table 154 PKI Logs 441
- Table 156 ACL Setting Notes 442
- Table 157 ICMP Notes 443
- 25.6 Syslog Logs 445
- CHAPTER 26 447
- 26.3 Configuring Password 448
- 26.4 Time and Date 449
- Chapter 26 Maintenance 450
- Chapter 26 Maintenance 451
- 26.5.1 Resetting the Time 452
- 26.7 Transparent Firewalls 454
- 26.10 F/W Upload Screen 457
- 26.11 Backup and Restore 459
- 26.12 Restart Screen 461
- 26.13 Diagnostics 462
- CHAPTER 27 467
- 27.2.2 Entering the Password 468
- 27.3.1 Main Menu 469
- Table 170 Main Menu Summary 470
- 27.3.2 SMT Menus Overview 471
- 27.5 Resetting the ZyWALL 473
- CHAPTER 28 475
- CHAPTER 29 481
- 29.3 Dial Backup 482
- 29.5 Advanced WAN Setup 483
- [ENTER] 484
- 29.7 Editing TCP/IP Options 487
- 29.8 Editing Login Script 488
- 29.9 Remote Node Filter 489
- CHAPTER 30 491
- Chapter 30 LAN Setup 492
- Chapter 30 LAN Setup 493
- 30.4.1 IP Alias Setup 495
- CHAPTER 31 497
- Chapter 31 Internet Access 498
- Chapter 31 Internet Access 499
- 31.5 Basic Setup Complete 500
- CHAPTER 32 501
- 32.3 TCP/IP Setup 502
- 32.3.2 IP Alias Setup 503
- Chapter 32 DMZ Setup 504
- CHAPTER 33 505
- 33.1.2 IP Alias Setup 506
- Chapter 33 Wireless Setup 507
- Chapter 33 Wireless Setup 508
- CHAPTER 34 509
- Chapter 34 Remote Node Setup 510
- 34.3.2 PPPoE Encapsulation 511
- 34.3.3 PPTP Encapsulation 513
- 34.4 Edit IP 514
- Chapter 34 Remote Node Setup 515
- 34.5 Remote Node Filter 516
- 34.6 Traffic Redirect 517
- CHAPTER 35 519
- CHAPTER 36 521
- 36.2 NAT Setup 523
- Menu 15.1.255 is read-only 524
- Menu 15.1.1.1 527
- 36.4 General NAT Examples 530
- Figure 352 NAT Example 1 531
- Figure 354 NAT Example 2 532
- Figure 356 NAT Example 3 533
- One-to-One mapping types 536
- 36.5 Trigger Port Forwarding 537
- CHAPTER 37 539
- CHAPTER 38 541
- 38.3 Example Filter 550
- 38.4 Filter Types and NAT 552
- 38.5 Firewall Versus Filters 552
- 38.6 Applying a Filter 553
- 38.6.1 Applying LAN Filters 554
- 38.6.2 Applying DMZ Filters 554
- HTTP connections 555
- CHAPTER 39 557
- 39.2 SNMP Traps 558
- CHAPTER 40 559
- 40.3.1 System Information 561
- 40.4 Log and Trace 562
- 40.4.2 Syslog Logging 563
- 2 Packet triggered 565
- 3 Filter log 565
- 4 PPP log 566
- 5 Firewall log 566
- 40.5 Diagnostic 567
- 40.5.1 WAN DHCP 568
- CHAPTER 41 571
- 41.3 Backup Configuration 572
- 41.3.4 GUI-based FTP Clients 574
- 41.3.7 TFTP Command Example 575
- " WARNING! 577
- 41.5.5 TFTP File Upload 582
- CHAPTER 42 587
- 42.1.1 Command Syntax 588
- 42.1.2 Command Usage 588
- 42.2 Call Control Support 589
- 42.2.2 Call History 590
- 42.3 Time and Date Setting 591
- CHAPTER 43 595
- Chapter 43 Remote Management 596
- Chapter 43 Remote Management 597
- CHAPTER 44 599
- Chapter 44 Call Scheduling 600
- Chapter 44 Call Scheduling 601
- PART VII 603
- CHAPTER 45 605
- V I forgot the password 606
- FTP to upload new firmware 607
- 45.3 Internet Access 608
- I cannot access the Internet 609
- 45.5 UPnP 610
- Restart your computer 611
- 2 Restart the applications 611
- Chapter 45 Troubleshooting 612
- CHAPTER 46 613
- 46.2 Cable Pin Assignments 615
- PART VIII 619
- APPENDIX A 621
- Installing Components 622
- Configuring 623
- Windows 2000/NT/XP 624
- Macintosh OS 8/9 629
- Macintosh OS X 631
- Verifying Settings 632
- Using Configuration Files 634
- APPENDIX B 637
- JavaScripts 640
- Java Permissions 641
- Mozilla Firefox 642
- APPENDIX C 645
- Subnet Masks 646
- Notation 647
- Subnetting 648
- Example: Four Subnets 649
- Example: Eight Subnets 650
- Subnet Planning 651
- Configuring IP Addresses 652
- APPENDIX D 653
- Appendix D Common Services 654
- Appendix D Common Services 655
- APPENDIX E 657
- Figure 465 Login Screen 658
- APPENDIX F 669
- ZyXEL Limited Warranty 670
- Appendix F Legal Information 671
- Appendix F Legal Information 672
- APPENDIX G 673
- Appendix G Customer Support 674
- Appendix G Customer Support 675
- Numerics 679
Related products and manuals for Routers ZyXEL ZyWALL 2 Plus
Routers ZyXEL P-335 Plus User Manual
(95 pages)
(95 pages)
Routers ZyXEL ZYAIR B-2000 User Manual
(204 pages)
(204 pages)
Routers ZyXEL FMG3024-D10A User Manual
(316 pages)
(316 pages)
Routers ZyXEL P-660R-T1/T3 V2 User Manual
(15 pages)
(15 pages)
Routers ZyXEL P-870HW-51a User Manual
(276 pages)
(276 pages)
Routers ZyXEL PLA-402 User Manual
(60 pages)
(60 pages)
Routers ZyXEL AMG1202-T10A User Manual
(296 pages)
(296 pages)
Routers ZyXEL P-335WT User Manual
(485 pages)
(485 pages)
Routers ZyXEL ZYAIR B-4000 User Manual
(22 pages)
(22 pages)
Routers ZyXEL PRESTIGE 2602RL-D3A User Manual
(176 pages)
(176 pages)
Routers ZyXEL NBG318S User Manual
(83 pages)
(83 pages)
Routers ZyXEL WAP3205 User Manual
(196 pages)
(196 pages)
Routers ZyXEL P-2602R-DxA Series User Manual
(348 pages)
(348 pages)
Routers ZyXEL P-660RU-TX V2 User Manual
(18 pages)
(18 pages)
Routers ZyXEL P-660HW-D User Manual
(6 pages)
(6 pages)
Routers ZyXEL ADSL/ADSL2/ADSL2+ User Manual
(282 pages)
(282 pages)
Routers ZyXEL P-2602HWLNI User Manual
(496 pages)
(496 pages)
Routers ZyXEL 1-Bay User Manual
(162 pages)
(162 pages)
© 2020, manymanuals.com. All rights reserved. | 0.043 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comments to this Manuals