Services
See the Objects section for related information on these screens.
Services Overview
IP Protocols
IP protocols are based on the eight-bit protocol field in the IP header. This field represents the next-level protocol that is sent in this packet. This section discusses three of the most common IP protocols.
Computers use Transmission Control Protocol (TCP, IP protocol 6) and User Datagram Protocol (UDP, IP protocol 17) to exchange data with each other. TCP guarantees reliable delivery but is slower and more complex. Some uses are FTP, HTTP, SMTP, and TELNET. UDP is simpler and faster but is less reliable. Some uses are DHCP, DNS, RIP, and SNMP.
TCP creates connections between computers to exchange data. Once the connection is established, the computers exchange data. If data arrives out of sequence or is missing, TCP puts it in sequence or waits for the data to be re-transmitted. Then, the connection is terminated.
In contrast, computers use UDP to send short messages to each other. There is no guarantee that the messages arrive in sequence or that the messages arrive at all.
Both TCP and UDP use ports to identify the source and destination. Each port is a 16-bit number. Some port numbers have been standardized and are used by low-level system processes; many others have no particular meaning.
Unlike TCP and UDP, Internet Control Message Protocol (ICMP, IP protocol 1) is mainly used to send error messages or to investigate problems. For example, ICMP is used to send the response if a computer cannot be reached. Another use is ping. ICMP does not guarantee delivery, but networks often treat ICMP messages differently, sometimes looking at the message itself to decide where to send it.
Service Objects and Service Groups
Use service objects to define IP protocols.
These objects are used in policy routes, firewall rules, and IDP profiles.
Use service groups when you want to create the same rule for several services, instead of creating separate rules for each service. Service groups may consist of services and other service groups. The sequence of members in the service group is not important.
Service Summary Screen
The Service summary screen provides a summary of all services and their definition. In addition, this screen allows you to add, edit, and remove services.
Object > Service > Service
Label
|
Description
|
Total Services
|
This displays the total number of services configured on the ZyWALL.
|
services per page
|
Select the number of services you want to appear per page here.
|
Page x of x
|
This is the number of the page of entries currently displayed and the total number of pages of entries. Type a page number to go to or use the arrows to navigate the pages of entries.
|
#
|
This field is a sequential value, and it is not associated with a specific service.
|
Name
|
This field displays the name of each service.
|
Content
|
This field displays a description of each service.
|
Add icon
|
This column provides icons to add, edit, and remove services.
To add a service, click the Add icon at the top of the column. The Service Add/Edit screen appears.
To edit a service, click the Edit icon next to the service. The Service Add/Edit screen appears.
To delete a service, click the Remove icon next to the service. The web configurator confirms that you want to delete the service before doing so.
|
Service Add/Edit
The Service Add/Edit screen allows you to create a new service or edit an existing one.
Object > Service > Service > Edit
Label
|
Description
|
Name
|
Type the name used to refer to the service. You may use 1-31 alphanumeric characters, underscores(_), or dashes (-), but the first character cannot be a number. This value is case-sensitive.
|
IP Protocol
|
Select the protocol the service uses. Choices are: TCP, UDP, ICMP, and User Defined.
|
Starting Port
Destination Port
|
This field appears if the IP Protocol is TCP or UDP. Specify the port number(s) used by this service. If you fill in one of these fields, the service uses that port. If you fill in both fields, the service uses the range of ports.
|
ICMP Type
|
This field appears if the IP Protocol is ICMP Type.
Select the ICMP message used by this service. This field displays the message text, not the message number.
|
IP Protocol Number
|
This field appears if the IP Protocol is User Defined.
Enter the number of the next-level protocol (IP protocol). Allowed values are 0 - 255.
|
Service Group Summary Screen
The Service Group summary screen provides a summary of all service groups. In addition, this screen allows you to add, edit, and remove service groups.
Object > Service > Service Group
Label
|
Description
|
#
|
This field is a sequential value, and it is not associated with a specific service group.
|
Name
|
This field displays the name of each service group.
|
Description
|
This field displays the description of each service group, if any.
|
Add icon
|
This column provides icons to add, edit, and remove service groups.
To add a service group, click the Add icon at the top of the column. The Service Group Add/Edit screen appears.
To edit a service group, click the Edit icon next to the service group. The Service Group Add/Edit screen appears.
To delete a service group, click on the Remove icon next to the service group. The web configurator confirms that you want to delete the service group.
|
Service Group Add/Edit
The Service Group Add/Edit screen allows you to create a new service group or edit an existing one.
Object > Service > Service Group > Edit
Label
|
Description
|
Name
|
Enter the name of the service group. You may use 1-31 alphanumeric characters, underscores(_), or dashes (-), but the first character cannot be a number. This value is case-sensitive.
|
Description
|
Enter a description of the service group, if any. You can use up to 60 printable ASCII characters.
|
Available
|
This field displays the names of the service and service group objects that can be added to the service group.
Select service and service group objects that you want to be members of this group and click the right arrow to add them to the member list.
|
Member
|
This field displays the names of the service and service group objects that have been added to the service group. The order of members is not important. To remove members, select them and click the left arrow.
|