User Guide
Page 10
...8.2.2 Connecting an AP to the Zyxel Device Manually 194 8.2.3 Connecting an AP to Do First 221 9.2 Port Role ...221 9.3 Port Configuration ...222 9.4 Ethernet Summary Screen ...223 9.4.1 Ethernet Edit ...225 9.4.2 Proxy ARP ...241 9.4.3 Virtual Interfaces ...242 ZyWALL USG FLEX Series User's Guide 10 AP List ...195 8.3.2 AP Policy ...200 8.3.3 AP Group ...201 8.3.4 ...216 9.1 Interface Overview ...216 9.1.1 What You Can Do in this Chapter 216 9.1.2 What You Need to Know 216 9.1.3 What You Need to the Zyxel Device Using DHCP Option 138 194 8.3 AP Management Screens ...195 8.3.1 Mgnt.
...8.2.2 Connecting an AP to the Zyxel Device Manually 194 8.2.3 Connecting an AP to Do First 221 9.2 Port Role ...221 9.3 Port Configuration ...222 9.4 Ethernet Summary Screen ...223 9.4.1 Ethernet Edit ...225 9.4.2 Proxy ARP ...241 9.4.3 Virtual Interfaces ...242 ZyWALL USG FLEX Series User's Guide 10 AP List ...195 8.3.2 AP Policy ...200 8.3.3 AP Group ...201 8.3.4 ...216 9.1 Interface Overview ...216 9.1.1 What You Can Do in this Chapter 216 9.1.2 What You Need to Know 216 9.1.3 What You Need to the Zyxel Device Using DHCP Option 138 194 8.3 AP Management Screens ...195 8.3.1 Mgnt.
User Guide
Page 26
...User's Guide 26 CHAPTER 1 Introduction 1.1 Overview Zyxel Device refers to these models as outlined below. • USG FLEX 100 • USG FLEX 200 • USG FLEX 500 1.1.1 Model Feature Differences Note the following differences between the USG FLEX models: Table 1 USG FLEX Model Feature Comparison FEATURE/MODEL USG FLEX 100 Microsoft Azure YES Amazon VPC YES Anomaly... Role YES SSL Application YES SSL encrypted traffic inspection YES Bundled UTM Feature License Validity 1 year USG FLEX 200 YES YES YES YES YES YES YES YES YES YES YES YES YES NO YES YES YES YES YES 1 year...
...User's Guide 26 CHAPTER 1 Introduction 1.1 Overview Zyxel Device refers to these models as outlined below. • USG FLEX 100 • USG FLEX 200 • USG FLEX 500 1.1.1 Model Feature Differences Note the following differences between the USG FLEX models: Table 1 USG FLEX Model Feature Comparison FEATURE/MODEL USG FLEX 100 Microsoft Azure YES Amazon VPC YES Anomaly... Role YES SSL Application YES SSL encrypted traffic inspection YES Bundled UTM Feature License Validity 1 year USG FLEX 200 YES YES YES YES YES YES YES YES YES YES YES YES YES NO YES YES YES YES YES 1 year...
User Guide
Page 68
... interface 1 10/100/1000 Mbps Ethernet WAN Ports 1 10/100/1000 Mbps Ethernet Ports 4 Console Port 1 USG FLEX 200 2 1 2 4 1 USG FLEX 500 2 1 7 1 For information on interface names by model. The following table summarizes the port features of the Zyxel Device by model, default port / interface name mapping, and default interface / zone mapping please see Section 3.3 on...
... interface 1 10/100/1000 Mbps Ethernet WAN Ports 1 10/100/1000 Mbps Ethernet Ports 4 Console Port 1 USG FLEX 200 2 1 2 4 1 USG FLEX 500 2 1 7 1 For information on interface names by model. The following table summarizes the port features of the Zyxel Device by model, default port / interface name mapping, and default interface / zone mapping please see Section 3.3 on...
User Guide
Page 70
... use the console port to manage the Zyxel Device using the console port, you connect the Zyxel Device's power cord to a socket-outlet with communications software configured to enter your user name and password. Chapter 3 Hardware, Interfaces and Zones The following parameters: USB P2-P7 ( USG FLEX 200) • Speed 115200 bps • Data Bits...
... use the console port to manage the Zyxel Device using the console port, you connect the Zyxel Device's power cord to a socket-outlet with communications software configured to enter your user name and password. Chapter 3 Hardware, Interfaces and Zones The following parameters: USB P2-P7 ( USG FLEX 200) • Speed 115200 bps • Data Bits...
User Guide
Page 71
... desktop placement Yes Wall Mounting Yes Rack Mounting No USG FLEX 200 Yes Yes Yes USG FLEX 500 Yes No Yes WARNING! Attach a lock-and-cable from overheating. Do NOT block the ventilation holes on the Zyxel Device. When configuring using CLI commands. Note that ...scenarios of your connection to allow maximum ventilation. Overheating could affect the performance of the Zyxel Device by model. Table 14 USG FLEX Series Installation Comparison Table USG FLEX MODELS USG FLEX 100 Rubber feet for more information about the CLI. Allow 100 mm clearance for ...
... desktop placement Yes Wall Mounting Yes Rack Mounting No USG FLEX 200 Yes Yes Yes USG FLEX 500 Yes No Yes WARNING! Attach a lock-and-cable from overheating. Do NOT block the ventilation holes on the Zyxel Device. When configuring using CLI commands. Note that ...scenarios of your connection to allow maximum ventilation. Overheating could affect the performance of the Zyxel Device by model. Table 14 USG FLEX Series Installation Comparison Table USG FLEX MODELS USG FLEX 100 Rubber feet for more information about the CLI. Allow 100 mm clearance for ...
User Guide
Page 73
... up the bracket holes with the rack-mounting screws. Secure the Zyxel Device to allow air circulation and the attachment of clearance between mounting holes for each model: Table 15 Distance "X" Between FLEX Mounting Holes MODEL NAME DISTANCE "X" USG FLEX 100 174 mm (6.85") USG FLEX 200 206 mm (8.11") 1 Drill into a wall two holes 3 mm - 4 mm...
... up the bracket holes with the rack-mounting screws. Secure the Zyxel Device to allow air circulation and the attachment of clearance between mounting holes for each model: Table 15 Distance "X" Between FLEX Mounting Holes MODEL NAME DISTANCE "X" USG FLEX 100 174 mm (6.85") USG FLEX 200 206 mm (8.11") 1 Drill into a wall two holes 3 mm - 4 mm...
User Guide
Page 75
Interface Mapping PORT / INTERFACE P1 P2 P3 • USG FLEX 100 sfp wan lan1 • USG FLEX 200 sfp wan wan • USG FLEX 500 ge1 ge2 ge3 P4 lan1 lan1 ge4 P5 lan1 lan1 ge5 P6 opt lan1 ge6 P7 lan1 ge7 P8 ge8 The following ...> Shutdown > Shutdown or the shutdown command before you turn off the Zyxel Device or remove the power. Table 16 Default Physical Port - References to become corrupt. Table 17 Default Zone - Interface Mapping ZONE / INTERFACE WAN LAN1 • USG FLEX 200 WAN1 WAN1_PPP WAN2 WAN2_PPP LAN1 LAN2 LAN2 DMZ DMZ OPT SFP SFP_PPP NO...
Interface Mapping PORT / INTERFACE P1 P2 P3 • USG FLEX 100 sfp wan lan1 • USG FLEX 200 sfp wan wan • USG FLEX 500 ge1 ge2 ge3 P4 lan1 lan1 ge4 P5 lan1 lan1 ge5 P6 opt lan1 ge6 P7 lan1 ge7 P8 ge8 The following ...> Shutdown > Shutdown or the shutdown command before you turn off the Zyxel Device or remove the power. Table 16 Default Physical Port - References to become corrupt. Table 17 Default Zone - Interface Mapping ZONE / INTERFACE WAN LAN1 • USG FLEX 200 WAN1 WAN1_PPP WAN2 WAN2_PPP LAN1 LAN2 LAN2 DMZ DMZ OPT SFP SFP_PPP NO...
User Guide
Page 200
.... OK Cancel If the check box is the index number of the AP. Figure 162 Configuration > Wireless > AP Management > AP Policy ZyWALL USG FLEX Series User's Guide 200 Enter a VLAN ID for this VLAN ID as a VLAN created on the managed APs and determine the action the managed APs take if the... lit after the AP is associated with the setting you configure here. Select this option to configure the AP controller's IP address on the Zyxel Device and not one assigned to overwrite the AP SSID profile setting with this option to it from outside the network. Select this radio profile...
.... OK Cancel If the check box is the index number of the AP. Figure 162 Configuration > Wireless > AP Management > AP Policy ZyWALL USG FLEX Series User's Guide 200 Enter a VLAN ID for this VLAN ID as a VLAN created on the managed APs and determine the action the managed APs take if the... lit after the AP is associated with the setting you configure here. Select this option to configure the AP controller's IP address on the Zyxel Device and not one assigned to overwrite the AP SSID profile setting with this option to it from outside the network. Select this radio profile...
User Guide
Page 270
These rules are similar to make routing decisions. As a router, the Zyxel Device routes traffic between VLAN interfaces, but it does not route traffic within a VLAN interface. Otherwise, VLAN interfaces are also independent of the ...filtering rules for each department in many ways. VLAN Interfaces Overview In the Zyxel Device, each Ethernet interface can go through only one Ethernet interface, though each VLAN is called a VLAN interface. Figure 200 Configuration > Network > Interface > VLAN ZyWALL USG FLEX Series User's Guide 270 In this screen. Note: Each VLAN interface ...
These rules are similar to make routing decisions. As a router, the Zyxel Device routes traffic between VLAN interfaces, but it does not route traffic within a VLAN interface. Otherwise, VLAN interfaces are also independent of the ...filtering rules for each department in many ways. VLAN Interfaces Overview In the Zyxel Device, each Ethernet interface can go through only one Ethernet interface, though each VLAN is called a VLAN interface. Figure 200 Configuration > Network > Interface > VLAN ZyWALL USG FLEX Series User's Guide 270 In this screen. Note: Each VLAN interface ...
User Guide
Page 309
...for this packet, you can only enter the IP address. Table 124 Example: Routing Table Entry for a Gateway IP ADDRESS(ES) DESTINATION 0.0.0.0/0 200.200.200.100 The gateway is a default router to create an entry in the routing table. If two or more than one of each interface. ...Chapter 9 Interfaces IP Address Assignment Most interfaces have the same metric, the Zyxel Device uses the one that was set up first (the first entry in one gateway, the Zyxel Device uses the gateway with the lowest metric, or cost. If there is dropped. ZyWALL USG FLEX Series User's Guide 309
...for this packet, you can only enter the IP address. Table 124 Example: Routing Table Entry for a Gateway IP ADDRESS(ES) DESTINATION 0.0.0.0/0 200.200.200.100 The gateway is a default router to create an entry in the routing table. If two or more than one of each interface. ...Chapter 9 Interfaces IP Address Assignment Most interfaces have the same metric, the Zyxel Device uses the one that was set up first (the first entry in one gateway, the Zyxel Device uses the gateway with the lowest metric, or cost. If there is dropped. ZyWALL USG FLEX Series User's Guide 309
User Guide
Page 311
... Service) is 255.255.255.0, the Zyxel Device cannot assign 50.50.50.0 or 50.50.50.255. PPPoE/PPTP/L2TP Overview Point-to-Point Protocol over Ethernet (PPPoE, RFC 2516) and Point-to connect two computers over phone lines or broadband connections. ZyWALL USG FLEX Series User's Guide 311 For example, in... POOL SIZE RANGE OF ASSIGNED IP ADDRESS 50.50.50.33 5 50.50.50.33 - 50.50.50.37 75.75.75.1 200 75.75.75.1 - 75.75.75.200 99.99.1.1 1023 99.99.1.1 - 99.99.4.255 120.120.120.100 100 120.120.120.100 - 120.120.120.199 The...
... Service) is 255.255.255.0, the Zyxel Device cannot assign 50.50.50.0 or 50.50.50.255. PPPoE/PPTP/L2TP Overview Point-to-Point Protocol over Ethernet (PPPoE, RFC 2516) and Point-to connect two computers over phone lines or broadband connections. ZyWALL USG FLEX Series User's Guide 311 For example, in... POOL SIZE RANGE OF ASSIGNED IP ADDRESS 50.50.50.33 5 50.50.50.33 - 50.50.50.37 75.75.75.1 200 75.75.75.1 - 75.75.75.200 99.99.1.1 1023 99.99.1.1 - 99.99.4.255 120.120.120.100 100 120.120.120.100 - 120.120.120.199 The...
User Guide
Page 447
... uses a fairness-based (round-robin) scheduler to divide bandwidth among traffic flows with the same priority. • The Zyxel Device automatically treats traffic with bandwidth management disabled as priority 7 (the lowest priority). The connection initiator is on the LAN1 so ...WAN. This way you apply a bandwidth limit to outbound or inbound traffic, each member of traffic. • Inbound traffic is limited to 200 kbps. ZyWALL USG FLEX Series User's Guide 447 Take a LAN1 to WAN policy for other applications. Chapter 22 BWM (Bandwidth Management) Figure 311 LAN1 to WAN Connection...
... uses a fairness-based (round-robin) scheduler to divide bandwidth among traffic flows with the same priority. • The Zyxel Device automatically treats traffic with bandwidth management disabled as priority 7 (the lowest priority). The connection initiator is on the LAN1 so ...WAN. This way you apply a bandwidth limit to outbound or inbound traffic, each member of traffic. • Inbound traffic is limited to 200 kbps. ZyWALL USG FLEX Series User's Guide 447 Take a LAN1 to WAN policy for other applications. Chapter 22 BWM (Bandwidth Management) Figure 311 LAN1 to WAN Connection...
User Guide
Page 448
...more bandwidth and have maximize bandwidth usage enabled. No No PRIORITY 1 1 ACTUAL RATE 300 kbps 200 kbps ZyWALL USG FLEX Series User's Guide 448 Higher priority traffic does not get their configured rate. Figure 313 Bandwidth ...usage enabled to WAN policies for server B's traffic. Table 174 Configured Rate Effect POLICY CONFIGURED RATE A 300 kbps B 200 kbps MAX. You configure policy A for server A's traffic and policy B for FTP servers A and B. U. Bandwidth.... After each application gets its configured bandwidth rate, the Zyxel Device uses the fairness-
...more bandwidth and have maximize bandwidth usage enabled. No No PRIORITY 1 1 ACTUAL RATE 300 kbps 200 kbps ZyWALL USG FLEX Series User's Guide 448 Higher priority traffic does not get their configured rate. Figure 313 Bandwidth ...usage enabled to WAN policies for server B's traffic. Table 174 Configured Rate Effect POLICY CONFIGURED RATE A 300 kbps B 200 kbps MAX. You configure policy A for server A's traffic and policy B for FTP servers A and B. U. Bandwidth.... After each application gets its configured bandwidth rate, the Zyxel Device uses the fairness-
User Guide
Page 449
... bandwidth and a higher priority. Then the Zyxel Device divides the remaining bandwidth (1000 - 500 = 500) equally between the two. Table 176 Maximize Bandwidth Usage Effect POLICY CONFIGURED RATE MAX. B. B. A 300 kbps Yes B 200 kbps Yes PRIORITY 1 2 ACTUAL RATE 550...Zyxel Device still attempts to it's configured rate (800 kbps), leaving only 200 kbps for a total of the unused bandwidth each ). So server A gets its priority, server B gets almost no effect on how much of 550 kbps. Table 177 Priority and Over Allotment of 200 kbps. U. ZyWALL USG FLEX...
... bandwidth and a higher priority. Then the Zyxel Device divides the remaining bandwidth (1000 - 500 = 500) equally between the two. Table 176 Maximize Bandwidth Usage Effect POLICY CONFIGURED RATE MAX. B. B. A 300 kbps Yes B 200 kbps Yes PRIORITY 1 2 ACTUAL RATE 550...Zyxel Device still attempts to it's configured rate (800 kbps), leaving only 200 kbps for a total of the unused bandwidth each ). So server A gets its priority, server B gets almost no effect on how much of 550 kbps. Table 177 Priority and Over Allotment of 200 kbps. U. ZyWALL USG FLEX...
User Guide
Page 467
... in the RADIUS server. Then, set up user accounts in the table above. 23.2.1.1 Set Up User Accounts Set up this to the Zyxel Device. ZyWALL USG FLEX Series User's Guide 467 You can configure many policies and security settings for specific users or groups of users. Select an authentication method. default... HTTP traffic. Select this feature in the RADIUS server, and set the User Type to be authenticated locally by the Zyxel Device or by an external RADIUS server at 172.16.1.200. Click the Add icon. 2 Enter the same user name that is used in the SSO screen. This field is...
... in the RADIUS server. Then, set up user accounts in the table above. 23.2.1.1 Set Up User Accounts Set up this to the Zyxel Device. ZyWALL USG FLEX Series User's Guide 467 You can configure many policies and security settings for specific users or groups of users. Select an authentication method. default... HTTP traffic. Select this feature in the RADIUS server, and set the User Type to be authenticated locally by the Zyxel Device or by an external RADIUS server at 172.16.1.200. Click the Add icon. 2 Enter the same user name that is used in the SSO screen. This field is...
User Guide
Page 505
...Configuration > Hotspot > Billing > Discount > Add/Edit The following screen. Unit Set the duration of each discount level. ZyWALL USG FLEX Series User's Guide 505 OK Click OK to save your changes back to open the following table describes the labels in this ... level. Chapter 24 Hotspot 24.5.1 The Discount Add/Edit Screen The Discount Add/Edit screen allows you can configure the Zyxel Device to handle credit card transactions. Table 200 Configuration > Hotspot > Billing > Discount > Add/Edit LABEL DESCRIPTION Name This field displays the conditions of the billing...
...Configuration > Hotspot > Billing > Discount > Add/Edit The following screen. Unit Set the duration of each discount level. ZyWALL USG FLEX Series User's Guide 505 OK Click OK to save your changes back to open the following table describes the labels in this ... level. Chapter 24 Hotspot 24.5.1 The Discount Add/Edit Screen The Discount Add/Edit screen allows you can configure the Zyxel Device to handle credit card transactions. Table 200 Configuration > Hotspot > Billing > Discount > Add/Edit LABEL DESCRIPTION Name This field displays the conditions of the billing...
User Guide
Page 921
..., stored in a retrieval system, translated into any language, or transmitted in a residential installation. Regulatory Notice and Statement (Class B) Model List: USG FLEX 100, USG FLEX 200 UNITED STATES of the FCC Rules. Published by Zyxel Communications Corporation. The contents of this device does cause harmful interference to provide reasonable protection against harmful interference in any form...
..., stored in a retrieval system, translated into any language, or transmitted in a residential installation. Regulatory Notice and Statement (Class B) Model List: USG FLEX 100, USG FLEX 200 UNITED STATES of the FCC Rules. Published by Zyxel Communications Corporation. The contents of this device does cause harmful interference to provide reasonable protection against harmful interference in any form...