ZyXEL Communications ZyWall 10W User Manual page 549

FIELD
IP Addr Start When the Addr Type field is configured to Single, enter a static IP
address on the network behind the remote IPSec router.
When the Addr Type field is configured to Range, enter the beginning
(static) IP address, in a range of computers on the network behind the
remote IPSec router.
When the Addr Type field is configured to SUBNET, enter a static IP
address on the network behind the remote IPSec router.
This field displays N/A when you configure the Secure Gateway Address
field to 0.0.0.0.
End When the Addr Type field is configured to Single, this field is N/A.
When the Addr Type field is configured to Range, enter the end (static) IP
address, in a range of computers on the network behind the remote IPSec
router.
When the Addr Type field is configured to SUBNET, enter a subnet mask
on the network behind the remote IPSec router.
This field displays N/A when you configure the Secure Gateway Address
field to 0.0.0.0.
Port Start 0 is the default and signifies any port. Type a port number from 0 to 65535.
Someone behind the remote IPSec router cannot create a VPN tunnel
when attempting to connect using a port number that does not match this
port number or range of port numbers.
Some of the most common IP ports are: 21, FTP; 53, DNS; 23, Telnet; 80,
HTTP; 25, SMTP; 110, POP3.
End Enter a port number in this field to define a port range. This port number
must be greater than that specified in the previous field. This field is N/A
when 0 is configured in the Port Start field.
Enable Replay As a VPN setup is processing intensive, the system is vulnerable to Denial
Detection of Service (DoS) attacks The IPSec receiver can detect and reject old or
duplicate packets to protect against replay attacks. Enable replay detection
by setting this field to Yes.
Press [SPACE BAR] to select Yes or No. Choose Yes and press [ENTER]
to enable replay detection.
VPN/IPSec Setup
Table 40-2 Menu 27.1.1: IPSec Setup
DESCRIPTION
ZyWALL Series Internet Security Gateway
EXAMPLE
4.4.4.4
255.255.0.0
0
No
40-11