ZyXEL Communications Centralized Network Management Vantage CNM User Manual page 137

Table 52 Device Operation > Device Configuration > Security > VPN > VPN Rules (Manual)
> Add/Edit (continued)
LABEL
Allow NetBIOS Traffic
Through IPSec Tunnel
Local / Remote Network
Starting Address
Ending Address/Subnet Mask
Gateway Policy Information
My ZyWALL
Remote Gateway Address
Manual Proposal
SPI
Encapsulation Mode
Active Protocol
Vantage CNM User's Guide
DESCRIPTION
NetBIOS (Network Basic Input/Output System) are TCP or UDP
packets that enable a computer to find other computers. It may
sometimes be necessary to allow NetBIOS packets to pass through
VPN tunnels in order to allow local computers to find computers on the
remote network and vice versa.
Select this check box to send NetBIOS packets through the VPN
connection.
Local / Remote IP addresses must be static and correspond to the
remote IPSec router's configured remote IP addresses.
Two active SAs cannot have the local and remote IP address(es) both
the same. Two active SAs can have the same local or remote IP
address, but not both. You can configure multiple SAs between the
same local and remote IP addresses, as long as only one is active at
any time.
When the Address Type field is configured to Single, enter a (static)
IP address on the LAN behind the device. When the Address Type
field is configured to Range, enter the beginning (static) IP address, in
a range of computers on the LAN behind the device. When the
Address Type field is configured to Subnet, this is a (static) IP
address on the LAN behind the device.
When the Address Type field is configured to Single, this field is N/A.
When the Address Type field is configured to Range, enter the end
(static) IP address, in a range of computers on the LAN behind the
device. When the Address Type field is configured to Subnet, this is a
subnet mask on the LAN behind the device.
This is the IP address of the local and remote computer(s) of the VPN
tunnel.
Type the IP address of the computer with which you will make the VPN
connection or leave the field blank to have the device automatically
use the address in the Secure Gateway field.
Type a number (base 10) from 1 to 999999 for the Security Parameter
Index.
Select Tunnel mode or Transport mode from the drop-down list box.
Select ESP if you want to use ESP (Encapsulation Security Payload).
The ESP protocol (RFC 2406) provides encryption as well as some of
the services offered by AH. If you select ESP here, you must select
options from the Encryption Algorithm and Authentication
Algorithm fields.
Select AH if you want to use AH (Authentication Header Protocol). The
AH protocol (RFC 2402) was designed for integrity, authentication,
sequence integrity (replay resistance), and non-repudiation but not for
confidentiality, for which the ESP was designed. If you select AH here,
you must select options from the Authentication Algorithm field.
Chapter 6 Device Security Settings
137