6

Configuration Basics

This information is provided to help you configure the ZyWALL effectively. Some of it is helpful when you are just getting started. Some of it is provided for your reference when you configure various features in the ZyWALL.

Section 6.1 on page 91 introduces the ZyWALL’s object-based configuration.

Section 6.2 on page 92 introduces zones, interfaces, and port groups.

Section 6.3 on page 95 introduces some differences in terminology and organization between the ZyWALL and other routers, particularly ZyNOS routers.

Section 6.4 on page 96 covers the ZyWALL’s packet flow.

Section 6.5 on page 99 identifies the features you should configure before and after you configure the main screens for each feature. For example, if you want to configure a trunk for load-balancing, you should configure the member interfaces before you configure the trunk. After you configure the trunk, you should configure a policy route for it as well. (You might also have to configure criteria for the policy route.)

Section 6.6 on page 110 identifies the objects that store information used by other features.

Section 6.7 on page 111 introduces some of the tools available for system management.

6.1Object-based Configuration

The ZyWALL stores information or settings as objects. You use these objects to configure many of the ZyWALL’s features and settings. Once you configure an object, you can reuse it in configuring other features.

When you change an object’s settings, the ZyWALL automatically updates all the settings or rules that use the object. For example, if you create a schedule object, you can have firewall, application patrol, content filter, and other settings use it. If you modify the schedule, all the firewall, application patrol, content filter, and other settings that use the schedule automatically apply the updated schedule.

You can create address objects based on an interface’s IP address, subnet, or gateway. The ZyWALL automatically updates every rule or setting that uses these

 

91

ZyWALL USG 300 User’s Guide