Zyxel ZyWALL USG 300 Рекомендации по настройке онлайн

ZyWALL USG Support Notes

1. ROUTING AND NAT ........................................................................................... 7

1.1. UNDERSTAND PACKET FLOW ............................................................................ 8

1.1.1. General Packet Flow ................................................................................. 8

1.1.2. Routing priority ......................................................................................... 9

1.1.3. SNAT Priority ......................................................................................... 12

1.2. DEFAULT WAN TRUNK AND DEFAULT SNAT .................................................. 17

1.2.1. Interface Type ......................................................................................... 17

1.2.2. Default WAN Trunk and default SNAT .................................................. 21

1.2.2.1. Default WAN Trunk ......................................................................... 21

1.2.2.2. Default SNAT................................................................................... 23

1.2.2.3. Using Default WAN Trunk and Default SNAT ................................ 23

1.3. SETTING UP VIRTUAL SERVER ......................................................................... 25

1.3.1. Network Scenario.................................................................................... 25

1.3.2. Configuration steps ................................................................................. 26

1.4. SETTING UP ONE TO ONE NAT ........................................................................ 28

1.4.1. Network Scenario.................................................................................... 28

1.4.2. Configuration Steps ................................................................................ 28

1.5. SETTING UP MANY ONE TO ONE NAT ............................................................. 30

1.5.1. Application Scenario ............................................................................... 30

1.5.2. Configuration Steps ................................................................................ 31

1.6. NAT LOOPBACK ............................................................................................. 32

1.6.1. Network Scenario.................................................................................... 32

1.6.2. Configuration Steps ................................................................................ 33

1.7. NAT WITH PROXY ARP ................................................................................... 34

1.7.1. Application Scenario ............................................................................... 35

1.7.2. Configuration Steps ................................................................................ 35

1.8. POLICY ROUTE VS. DIRECT ROUTE ................................................................. 37

1.9. ROUTING FOR IPSEC VPN .............................................................................. 38

1.9.1. Application Scenario ............................................................................... 39

1.9.2. Configuration Steps ................................................................................ 39

1.10. ONE TO ONE NAT LINK FAIL OVER ............................................................. 41

1.10.1. Network Scenario ................................................................................ 41

1.10.2. Configuration Steps ............................................................................. 42

1.11. ACCESSING IPSEC VPN PEER SUBNET FROM SSL VPN CLIENTS ............... 44

1.11.1. Application Scenario ........................................................................... 44

1.11.2. Configuration Steps ............................................................................. 45

1.11.2.1. When Branch is a USG ZyWALL ................................................... 45

1.11.2.2. When Branch is a ZyNOS ZyWALL ............................................... 50

2. DEPLOYING EPS .............................................................................................. 55

2.1. EPS INTRODUCTION ........................................................................................ 55

2.1.1. EPS --- WebGUI ..................................................................................... 55

2.1.2. EPS --- CLI ............................................................................................. 58

2.1.3. EPS Application Note ............................................................................. 60