Chapter 11 Interfaces

ports at the layer-2 (data link, MAC address) level. This provides wire-speed throughput but no security.

Note the following if you are configuring from a computer connected to a lan1, lan2 or dmz port and change the port's role:

1A port's IP address varies as its role changes, make sure your computer's IP address is in the same subnet as the ZyWALL's lan1, lan2 or dmz IP address.

2Use the appropriate lan1, lan2 or dmz IP address to access the ZyWALL.

Figure 157 Configuration > Network > Interface > Port Role

Physical Ports

Interfaces

Each section in this screen is described below.

Table 49 Configuration > Network > Interface > Port Role

LABEL

DESCRIPTION

LAN1/DMZ

These are physical Ethernet ports.

P2~P5

 

 

 

lan1 (LAN1)

These are Ethernet interfaces and the zone to which each belongs.

lan2 (LAN2)

Use the radio buttons to select for which interface (network) you want

to use each physical port. For example, select a port’s LAN1 radio

dmz (DMZ)

button to use the port as part of the lan1 interface. The port will use

the ZyWALL’s lan1 IP address and MAC address.

 

 

When you assign more than one physical port to a network, you

 

create a port group. Port groups have the following characteristics:

 

• There is a layer-2 Ethernet switch between physical ports in the

 

port group. This provides wire-speed throughput but no security.

 

• It can increase the bandwidth between the port group and other

 

interfaces.

 

• The port group uses a single MAC address.

 

 

Apply

Click this button to save your changes and apply them to the ZyWALL.

 

 

Reset

Click this button to change the port groups to their current

 

configuration (last-saved values).

 

 

 

221

ZyWALL USG 20/20W User’s Guide