Table 14-9 Vpn Manual Setup - ZyXEL Communications Internet Security Gateway ZyWALL 2 Series User Manual

ZyWALL 2 Series User's Guide
The following table describes the labels in this screen.
LABEL
Active
Name
Key Management
Local:
Local IP addresses must be static and correspond to the remote IPSec router's configured remote IP
addresses.
Two active SAs cannot have the local and remote IP address(es) both the same. Two active SAs can have
the same local or remote IP address, but not both. You can configure multiple SAs between the same local
and remote IP addresses, as long as only one is active at any time.
Client to Site
Local IP Address
Site to Site
Address Type
Starting IP
Address
Ending IP
Address/Subnet
Mask
14-30

Table 14-9 VPN Manual Setup

Select this check box to activate this VPN policy.
Type up to 32 characters to identify this VPN policy. You may use any character,
including spaces, but the ZyWALL drops trailing spaces.
Select IKE or Manual Key (or Manual) from the drop-down list box. Manual Key is a
useful option for troubleshooting if you have problems using IKE key management.
Select this radio button to build a client to site VPN connection.
Enter a static local IP address. The local IP address must correspond to the remote
IPSec router's configured remote IP addresses.
Select this radio button to establish a VPN between two sites (groups of IP
addresses).
Use the drop-down list box to choose Range Address or Subnet Address. Select
Range Address for a specific range of IP addresses. Select Subnet Address to
specify IP addresses on a network by their subnet mask.
When the Address Type field is configured to Range Address, enter the beginning
(static) IP address, in a range of computers on the LAN behind your ZyWALL. When
the Address Type field is configured to Subnet Address, this is a (static) IP address
on the LAN behind your ZyWALL.
When the Address Type field is configured to Range Address, enter the end (static)
IP address, in a range of computers on the LAN behind your ZyWALL. When the
Address Type field is configured to Subnet Address, this is a subnet mask on the
LAN behind your ZyWALL.
DESCRIPTION
VPN Screens