ZyXEL Communications ZyWall 10W User Manual page 226

ZyWALL Series Internet Security Gateway
LABEL
Peer ID Type
15-16
Table 15-7 VPN IKE
Select from the following when you set Authentication Method to Pre-Shared Key.
Select IP to identify the remote IPSec router by its IP address.
Select DNS to identify the remote IPSec router by a domain name.
Select E-mail to identify the remote IPSec router by an e-mail address.
Select from the following when you set Authentication Method to Certificate.
Select IP to identify the remote IPSec router by an IP address. The IP
address must be the same as in the subject alternative name field of the
certificate that the remote IPSec router uses for this VPN connection.
Select DNS to identify the remote IPSec router by a domain name. The
domain name must be the same as in the subject alternative name field of
the certificate that the remote IPSec router uses for this VPN connection.
Select E-mail to identify the remote IPSec router by an e-mail address. The
e-mail address must be the same as in the subject alternative name field of
the certificate that the remote IPSec router uses for this VPN connection.
Select Subject Name to identify the remote IPSec router by a subject name
when the certificate that the peer uses for this VPN connection does not
contain a subject alternative name (such as IP or E-mail). The subject name
must be the same as in the subject name field of the certificate that the
remote IPSec router uses for this VPN connection.
Select Any to have the ZyWALL ignore the Peer ID Type and Content.
When you select IP, DNS, E-mail or Subject Name, only one remote IPSec
router can use this VPN connection with your ZyWALL.
When you select Any, the ZyWALL accepts VPN connection attempts from any
remote IPSec router that uses a valid certificate issued by one of the ZyWALL's
trusted certification authorities. Although the remote IPSec router would still
need to have the rest of the VPN settings properly configured. Use extended
authentication to limit which remote IPSec routers with certificates can use this
VPN connection.
DESCRIPTION
VPN Screens