User Guide
Page 10
...VFG6005 series VPN Firewall Gateway. Since the mobile broadband is able to automatically monitor your laptop while on Chip) solution, ZyXEL's VFG6005 Series VPN Firewall Gateway provides lower power consumption characteristics which saves not only energy, but also our environment. Session Manager ZyXEL's VFG6005 Series VPN Firewall Gateway...; True Mobile Broadband Sharing (Supports xDSL/cable modem and Mobile Cellular + 802.11n) ZyXEL's VFG6005 Series VPN Firewall Gateway supports multiple broadband technologies, including xDSL/cable modem and Mobile Cellular USB modem. It also...
...VFG6005 series VPN Firewall Gateway. Since the mobile broadband is able to automatically monitor your laptop while on Chip) solution, ZyXEL's VFG6005 Series VPN Firewall Gateway provides lower power consumption characteristics which saves not only energy, but also our environment. Session Manager ZyXEL's VFG6005 Series VPN Firewall Gateway...; True Mobile Broadband Sharing (Supports xDSL/cable modem and Mobile Cellular + 802.11n) ZyXEL's VFG6005 Series VPN Firewall Gateway supports multiple broadband technologies, including xDSL/cable modem and Mobile Cellular USB modem. It also...
User Guide
Page 11
... provides enterprise level data security to full featured IPSec VPN Clients or other legacy VPN Clients. In either case, ZyXEL's VFG6005 Series VPN Firewall Gateway has your VPN support covered. 2 bandwidth usage without difficulty and manage the network with total convenience and ease. Dual WAN Failover ZyXEL's VFG6005 Series VPN Firewall Gateway supports failover functions between fixed line (xDSL/cable modem) and...
... provides enterprise level data security to full featured IPSec VPN Clients or other legacy VPN Clients. In either case, ZyXEL's VFG6005 Series VPN Firewall Gateway has your VPN support covered. 2 bandwidth usage without difficulty and manage the network with total convenience and ease. Dual WAN Failover ZyXEL's VFG6005 Series VPN Firewall Gateway supports failover functions between fixed line (xDSL/cable modem) and...
User Guide
Page 13
... Activity Orange Green On Blinking Off On On Off Description Power is on and system is disconnected. Wireless connection is enabled Wireless connection is disabled ZyXEL VFG6005 Series VPN Firewall Gateway is booting up. Power is off System is faulty; The Mobile WAN is connected The Ethernet LAN port is connected The Ethernet LAN port...
... Activity Orange Green On Blinking Off On On Off Description Power is on and system is disconnected. Wireless connection is enabled Wireless connection is disabled ZyXEL VFG6005 Series VPN Firewall Gateway is booting up. Power is off System is faulty; The Mobile WAN is connected The Ethernet LAN port is connected The Ethernet LAN port...
User Guide
Page 14
... the status LED turns green without blinking, please press the Reset button for making a wired connection. 2.1.2 Rear Panel (left to factory default. The Reset ZyXEL VFG6005 Series VPN Firewall Gateway will restart automatically and reset the settings to right) Blinking Data is not used. Please use USB port 1 as indicated on the top cover. LAN...
... the status LED turns green without blinking, please press the Reset button for making a wired connection. 2.1.2 Rear Panel (left to factory default. The Reset ZyXEL VFG6005 Series VPN Firewall Gateway will restart automatically and reset the settings to right) Blinking Data is not used. Please use USB port 1 as indicated on the top cover. LAN...
User Guide
Page 15
...blue). 6 Plug one of your computer's network port and the other end into one end into The ZyXEL VFG6005 Series DC power port and the other end into a power outlet. The ZyXEL VFG6005 Series VPN Firewall Gateway POWER LED will blink during the boot up phase and be ready when its POWER LED is solid. .... A: Connecting via xDSL or cable modem: take an Ethernet cable and plug one end of the cable into one of The ZyXEL VFG6005 Series VPN Firewall Gateway's LAN ports (yellow). 2.2.3 Setup WAN Connection Choose how to connect the ZyXEL VFG6005 Series VPN Firewall Gateway to the Internet.
...blue). 6 Plug one of your computer's network port and the other end into one end into The ZyXEL VFG6005 Series DC power port and the other end into a power outlet. The ZyXEL VFG6005 Series VPN Firewall Gateway POWER LED will blink during the boot up phase and be ready when its POWER LED is solid. .... A: Connecting via xDSL or cable modem: take an Ethernet cable and plug one end of the cable into one of The ZyXEL VFG6005 Series VPN Firewall Gateway's LAN ports (yellow). 2.2.3 Setup WAN Connection Choose how to connect the ZyXEL VFG6005 Series VPN Firewall Gateway to the Internet.
User Guide
Page 16
.... * DHCP is recommended due to configure your network settings in configuration. 3.1 FOR WINDOWS XP USERS 1. CHAPTER3 NETWORK SETTINGS FOR YOUR PC Before using the ZyXEL VFG6005 Series VPN Firewall Gateway, you have to its relative ease in your network card. 4. You can either use DHCP or Static IP for your computer. You will now see...
.... * DHCP is recommended due to configure your network settings in configuration. 3.1 FOR WINDOWS XP USERS 1. CHAPTER3 NETWORK SETTINGS FOR YOUR PC Before using the ZyXEL VFG6005 Series VPN Firewall Gateway, you have to its relative ease in your network card. 4. You can either use DHCP or Static IP for your computer. You will now see...
User Guide
Page 17
The ZyXEL VFG6005 Series VPN Firewall Gateway will now assign an IP address to continue. 8 You have now finished the network settings for your computer. To use DHCP Select Obtain an ... server: 192.168.10.1. Then click OK. 6. Then click OK. IP address: 192.168.10.x (x could be from 2 ~ 254) Subnet mask: 255.255.255.0 Default gateway: 192.168.10.1 Now select Use the following DNS server addresses and enter the following IP address and enter the followings. Enable DHCP or Static...
The ZyXEL VFG6005 Series VPN Firewall Gateway will now assign an IP address to continue. 8 You have now finished the network settings for your computer. To use DHCP Select Obtain an ... server: 192.168.10.1. Then click OK. 6. Then click OK. IP address: 192.168.10.x (x could be from 2 ~ 254) Subnet mask: 255.255.255.0 Default gateway: 192.168.10.1 Now select Use the following DNS server addresses and enter the following IP address and enter the followings. Enable DHCP or Static...
User Guide
Page 19
IP address: 192.168.10.x (x could be from 2 ~ 254) Subnet mask: 255.255.255.0 Default gateway: 192.168.10.1 Now select Use the following DNS server addresses and enter the following IP address and enter the followings. Please go to Chapter 4 ... IP: To use Static IP Select Use the following . Then click OK. Preferred DNS server: 192.168.10.1 Then click OK. 12. 11. The ZyXEL VFG6005 Series VPN Firewall Gateway will now assign an IP address to continue. 10
IP address: 192.168.10.x (x could be from 2 ~ 254) Subnet mask: 255.255.255.0 Default gateway: 192.168.10.1 Now select Use the following DNS server addresses and enter the following IP address and enter the followings. Please go to Chapter 4 ... IP: To use Static IP Select Use the following . Then click OK. Preferred DNS server: 192.168.10.1 Then click OK. 12. 11. The ZyXEL VFG6005 Series VPN Firewall Gateway will now assign an IP address to continue. 10
User Guide
Page 20
Select TCP/IP -> PCI Fast Ethernet Adapter for your computer. 11 Click on Properties. Then click OK. You will see the following screen. 16. Enable DHCP or Static IP: To use DHCP Select Obtain an IP Address automatically. You will now the following screen. 14. 3.3 FOR WINDOWS 98/ME USERS 13. Select Start > Settings > Network. The ZyXEL VFG6005 Series VPN Firewall Gateway will now assign an IP address to your network card. 15.
Select TCP/IP -> PCI Fast Ethernet Adapter for your computer. 11 Click on Properties. Then click OK. You will see the following screen. 16. Enable DHCP or Static IP: To use DHCP Select Obtain an IP Address automatically. You will now the following screen. 14. 3.3 FOR WINDOWS 98/ME USERS 13. Select Start > Settings > Network. The ZyXEL VFG6005 Series VPN Firewall Gateway will now assign an IP address to your network card. 15.
User Guide
Page 24
... HTTP://192.168.10.1] 90H When you need to the configuration interface for the ZyXEL VFG6005 Series VPN Firewall Gateway, the login screen will now see the Router>Status page of The ZyXEL VFG6005 Series VPN Firewall Gateway. For initial Router Setup, please consult the Quick Start Guide. 15 CHAPTER4 ACCESSING... THE GATEWAY For Windows XP/2000 users, your computer should have obtained an IP address ...
... HTTP://192.168.10.1] 90H When you need to the configuration interface for the ZyXEL VFG6005 Series VPN Firewall Gateway, the login screen will now see the Router>Status page of The ZyXEL VFG6005 Series VPN Firewall Gateway. For initial Router Setup, please consult the Quick Start Guide. 15 CHAPTER4 ACCESSING... THE GATEWAY For Windows XP/2000 users, your computer should have obtained an IP address ...
User Guide
Page 26
WAN Settings: The ZyXEL VFG6005 Series VPN Firewall Gateway supports Ethernet WAN and Mobile WAN. If ―Not Connected‖ shows up in the Router/Status page as below. Whatever WAN connection type you should check the WAN settings again to get correct connection 17 Ethernet WAN has three connection types: DHCP, Static and PPPoE. 24. Please ensure which connection type should be shown in the setting, you have chosen, The ZyXEL VFG6005 Series VPN Firewall Gateway will get a WAN IP and this IP will be used, and select your internet connection type from the pull-down menu.
WAN Settings: The ZyXEL VFG6005 Series VPN Firewall Gateway supports Ethernet WAN and Mobile WAN. If ―Not Connected‖ shows up in the Router/Status page as below. Whatever WAN connection type you should check the WAN settings again to get correct connection 17 Ethernet WAN has three connection types: DHCP, Static and PPPoE. 24. Please ensure which connection type should be shown in the setting, you have chosen, The ZyXEL VFG6005 Series VPN Firewall Gateway will get a WAN IP and this IP will be used, and select your internet connection type from the pull-down menu.
User Guide
Page 29
... access the internet, press ―Get My MAC‖ button. You may also choose from the list of profiles for The ZyXEL VFG6005 Series VPN Firewall Gateway using the pre-registered MAC address. 1. You will see the following the instructions below. If your ISP. You can also type...known ISP settings. (Please note that some information might not be needed.) 20 To bypass the rule, you use to configure The ZyXEL VFG6005 Series VPN Firewall Gateway is the device which has been granted access by your ISP. 5.1.5 Mobile WAN (connected by information related to the internet. 5.1.4 ...
... access the internet, press ―Get My MAC‖ button. You may also choose from the list of profiles for The ZyXEL VFG6005 Series VPN Firewall Gateway using the pre-registered MAC address. 1. You will see the following the instructions below. If your ISP. You can also type...known ISP settings. (Please note that some information might not be needed.) 20 To bypass the rule, you use to configure The ZyXEL VFG6005 Series VPN Firewall Gateway is the device which has been granted access by your ISP. 5.1.5 Mobile WAN (connected by information related to the internet. 5.1.4 ...
User Guide
Page 36
... address. Otherwise choose ISP DNS Server to use your ISP's default server or Custom to enter your LAN following screen. 2. 5.4 DHCP SERVER SETUP The ZyXEL VFG6005 Series VPN Firewall Gateway provides DHCP server service in order to offer IP addresses to enable/disable DHCP Server. The DHCP starting IP addresses offered by the DHCP server...
... address. Otherwise choose ISP DNS Server to use your ISP's default server or Custom to enter your LAN following screen. 2. 5.4 DHCP SERVER SETUP The ZyXEL VFG6005 Series VPN Firewall Gateway provides DHCP server service in order to offer IP addresses to enable/disable DHCP Server. The DHCP starting IP addresses offered by the DHCP server...
User Guide
Page 37
....com or ZoneEdit.com. Register with the virtual server feature. However, you wish to find your virtual server by the domain name. Click on the ZyXEL VFG6005 Series VPN Firewall Gateway. 2. In this case, you through a fixed domain name to a computer/router which has a dynamic IP address. It allows other users can connect to you...
....com or ZoneEdit.com. Register with the virtual server feature. However, you wish to find your virtual server by the domain name. Click on the ZyXEL VFG6005 Series VPN Firewall Gateway. 2. In this case, you through a fixed domain name to a computer/router which has a dynamic IP address. It allows other users can connect to you...
User Guide
Page 40
... on their characteristics. Enter the wireless station name you would like to turn on this SSID. Configure SSID settings following screen. 2. The ZyXEL VFG6005 Series VPN Firewall Gateway broadcasts SSID periodically. Wireless SSID Wireless SSID Name Wireless SSID Broadcasting Wi-Fi Multimedia (WMM) Select Enable if you would like to configure ... have higher priorities over ordinary traffic. 31 You will grant different levels of your wireless network to find and connect The ZyXEL VFG6005 Series VPN Firewall Gateway. Select Disable if you would like to turn off .
... on their characteristics. Enter the wireless station name you would like to turn on this SSID. Configure SSID settings following screen. 2. The ZyXEL VFG6005 Series VPN Firewall Gateway broadcasts SSID periodically. Wireless SSID Wireless SSID Name Wireless SSID Broadcasting Wi-Fi Multimedia (WMM) Select Enable if you would like to configure ... have higher priorities over ordinary traffic. 31 You will grant different levels of your wireless network to find and connect The ZyXEL VFG6005 Series VPN Firewall Gateway. Select Disable if you would like to turn off .
User Guide
Page 47
...below. Uncheck to disable TCP SYN DoS Protection. Uncheck to disable ICMP Broadcasting Protection. ICMP Broadcasting Protection The ZyXEL VFG6005 Series VPN Firewall Gateway is generated and sent to detect TCP SYN DoS attacks and limits the resource consumption by lowering the incoming... Select Enable to enable TCP SYN DoS Protection. Check to enable SPI Firewall Protection. memory, CPU) to reply and to disable SPI Firewall Protection. Therefore, the ZyXEL VFG6005 Series VPN Firewall Gateway is still able to enable ICMP Broadcasting Protection. Without TCP SYN Dos ...
...below. Uncheck to disable TCP SYN DoS Protection. Uncheck to disable ICMP Broadcasting Protection. ICMP Broadcasting Protection The ZyXEL VFG6005 Series VPN Firewall Gateway is generated and sent to detect TCP SYN DoS attacks and limits the resource consumption by lowering the incoming... Select Enable to enable TCP SYN DoS Protection. Check to enable SPI Firewall Protection. memory, CPU) to reply and to disable SPI Firewall Protection. Therefore, the ZyXEL VFG6005 Series VPN Firewall Gateway is still able to enable ICMP Broadcasting Protection. Without TCP SYN Dos ...
User Guide
Page 48
.... Check to disable ICMP Redirect Protection. Consequently, this server will suffer from a huge amount of interruptions and consumption of computing resources. The ZyXEL VFG6005 Series VPN Firewall Gateway is very likely to be sent, and so when there is the occurrence that ICMP redirect packets are sent, it is important to note... change the existing routing path. Generally, ICMP redirect packets should not be used as a means for a network attack. 39 ICMP Redirect Protection Firewall Gateway). An ICMP redirect message is a way to avoid a potential ICMP broadcasting DoS attack.
.... Check to disable ICMP Redirect Protection. Consequently, this server will suffer from a huge amount of interruptions and consumption of computing resources. The ZyXEL VFG6005 Series VPN Firewall Gateway is very likely to be sent, and so when there is the occurrence that ICMP redirect packets are sent, it is important to note... change the existing routing path. Generally, ICMP redirect packets should not be used as a means for a network attack. 39 ICMP Redirect Protection Firewall Gateway). An ICMP redirect message is a way to avoid a potential ICMP broadcasting DoS attack.
User Guide
Page 49
... yourself. 2. Type the MAC address to permit a device to access to enable ACL. Please do not change the parameters unless you wish to the ZyXEL VFG6005 Series VPN Firewall Gateway. 40 Configure Access Control List (ACL) Settings following screen. Be aware that adding the MAC address of your managing computer is required in the MAC...
... yourself. 2. Type the MAC address to permit a device to access to enable ACL. Please do not change the parameters unless you wish to the ZyXEL VFG6005 Series VPN Firewall Gateway. 40 Configure Access Control List (ACL) Settings following screen. Be aware that adding the MAC address of your managing computer is required in the MAC...
User Guide
Page 65
..., if users do not wish for destination port to one of the internal ports specified. When an Internet request wants to access a port, the ZyXEL VFG6005 Series VPN Firewall Gateway will redirect the request to the corresponding internal server and change its destination port to be changed for a request, the internal port range should be... a specific external port range to access any one of the configured external ports, it will dispatch it when the application is not used. When the ZyXEL VFG6005 Series VPN Firewall Gateway receives an external request to a local server.
..., if users do not wish for destination port to one of the internal ports specified. When an Internet request wants to access a port, the ZyXEL VFG6005 Series VPN Firewall Gateway will redirect the request to the corresponding internal server and change its destination port to be changed for a request, the internal port range should be... a specific external port range to access any one of the configured external ports, it will dispatch it when the application is not used. When the ZyXEL VFG6005 Series VPN Firewall Gateway receives an external request to a local server.
User Guide
Page 77
...Use Maximal Download Use Maximal Upload Check this box to allow the usage of the DBM rule. You will be controlled in the VFG6005 Series. Name of free bandwidth Enter the limited download value to 150Kbps Enter the limited upload value to 30Kbps 9.1.3 Add DBM ...the following the instructions below Sequence Number Rule Name Rule Enable Internal IP Range This defines the sequence of the DBM IPs, the ZyXEL VFG6005 Series VPN Firewall Gateway will dynamically control the bandwidth by DBM system without any other complicated settings. 68 Configure [Add DBM] Settings following screen. 2....
...Use Maximal Download Use Maximal Upload Check this box to allow the usage of the DBM rule. You will be controlled in the VFG6005 Series. Name of free bandwidth Enter the limited download value to 150Kbps Enter the limited upload value to 30Kbps 9.1.3 Add DBM ...the following the instructions below Sequence Number Rule Name Rule Enable Internal IP Range This defines the sequence of the DBM IPs, the ZyXEL VFG6005 Series VPN Firewall Gateway will dynamically control the bandwidth by DBM system without any other complicated settings. 68 Configure [Add DBM] Settings following screen. 2....