ZyXEL Communications ZyXEL ZyWALL USG-1000, User Manual

Page: 86 / 986

Chapter 5 Configuration Basics
ZyWALL USG 2000 User’s Guide
86
change ge1’s IP address, the ZyWALL automatically updates the rules or settings
that use the ge1 interface-based, LAN subnet address object.
You can use the Objects screens to create objects before you configure features
that use them. If you are in a screen that uses objects, you can also usually
select Create Object to open a screen where you can configure a new object.
For a list of common objects, see Section 5.5 on page 99 .
5.2 Zones, Interfaces, and Physical Ports
Zones (groups of interfaces and VPN tunnels) simplify security settings. Here is an
overview of zones, interfaces, and physical ports in the ZyWALL.
Figure 41 Zones, Interfaces, and Physical Ethernet Ports
Physical Ports
Interfaces
Zones
LAN
P1 P2 P3 P4 P5 P6 P7
ge1 ge2 ge3 ge6
WAN
ge7
P8
ge4 ge5
DMZ
ge8
Table 20 Zones, Interfaces, and Physical Ethernet Ports
Zones
(WAN, LAN, DMZ)
A zone is a group of interfaces and VPN tunnels. Use zones to apply
security settings such as firewall, IDP, remote management, anti-
virus, and application patrol.
Interfaces
(Ethernet,
VLAN,...)
Interfaces are logical entities that (layer-3) packets pass through.
Use interfaces in configuring VPN, zones, trunks, device HA, DDNS,
policy routes, static routes, HTTP redirect, and virtual server.
Port groups combine physical ports into interfaces.
Physical
Ethernet Ports
(P1, P2, ...)
The physical port is where you connect a cable. In configuration, you
use physical ports when configuring port groups. You use interfaces
and zones in configuring other features.