ZyXEL Communications 91-009-073003B ユーザーズマニュアル

ページ / 944
Chapter 6 Configuration Basics
ZyWALL USG 50 User’s Guide
88
change an Ethernet interface’s IP address, the ZyWALL automatically updates the 
rules or settings that use the interface-based, LAN subnet address object.
You can use the Configuration > Objects screens to create objects before you 
configure features that use them. If you are in a screen that uses objects, you can 
also usually select Create new Object to be able to configure a new object. For a 
list of common objects, see 
Use the Object Reference screen (
to see what 
objects are configured and which configuration settings reference specific objects. 
6.2  Zones, Interfaces, and Physical Ports
Zones (groups of interfaces and VPN tunnels) simplify security settings. Here is an 
overview of zones, interfaces, and physical ports in the ZyWALL. 
Figure 52    Zones, Interfaces, and Physical Ethernet Ports       
Table 13   Zones, Interfaces, and Physical Ethernet Ports
Zones
(WAN,LAN, DMZ)
A zone is a group of interfaces and VPN tunnels. Use zones to apply 
security settings such as firewall, IDP, remote management, anti-
virus, and application patrol. 
Interfaces 
(Ethernet, 
VLAN,...)
Interfaces are logical entities that (layer-3) packets pass through. 
Use interfaces in configuring VPN, zones, trunks, DDNS, policy 
routes, static routes, HTTP redirect, and NAT.
Port roles combine physical ports into interfaces. 
Physical 
Ethernet Ports
(P1, P2, ...)
The physical port is where you connect a cable. In configuration, you 
use physical ports when configuring port groups. You use interfaces 
and zones in configuring other features.
Physical Ports
Interfaces
Zones
LAN1
DMZ
lan1
dmz
LAN2
lan2
WAN
wan1  wan2