Filter
Top Products
ZyWALL USG 300 User’s Guide
91
CHAPTER 6
Configuration Basics
This information is provided to help you configure the ZyWALL effectively. Some of
it is helpful when you are just getting started. Some of it is provided for your
reference when you configure various features in the ZyWALL.
• Section 6.1 on page 91 introduces the ZyWALL’s object-based configuration.
• Section 6.2 on page 92 introduces zones, interfaces, and port groups.
• Section 6.3 on page 95 introduces some differences in terminology and
organization between the ZyWALL and other routers, particularly ZyNOS
routers.
• Section 6.4 on page 96 covers the ZyWALL’s packet flow.
• Section 6.5 on page 99 identifies the features you should configure before and
after you configure the main screens for each feature. For example, if you want
to configure a trunk for load-balancing, you should configure the member
interfaces before you configure the trunk. After you configure the trunk, you
should configure a policy route for it as well. (You might also have to configure
criteria for the policy route.)
• Section 6.6 on page 110 identifies the objects that store information used by
other features.
• Section 6.7 on page 111 introduces some of the tools available for system
management.
6.1 Object-based Configuration
The ZyWALL stores information or settings as objects. You use these objects to
configure many of the ZyWALL’s features and settings. Once you configure an
object, you can reuse it in configuring other features.
When you change an object’s settings, the ZyWALL automatically updates all the
settings or rules that use the object. For example, if you create a schedule object,
you can have firewall, application patrol, content filter, and other settings use it. If
you modify the schedule, all the firewall, application patrol, content filter, and
other settings that use the schedule automatically apply the updated schedule.
You can create address objects based on an interface’s IP address, subnet, or
gateway. The ZyWALL automatically updates every rule or setting that uses these