ZyXEL Communications Internet Security Gateway ZyWALL 2 Series User Manual page 514

ZyWALL 2 Series User's Guide
FIELD
Peer ID type Press [SPACE BAR] to choose IP, DNS, or E-mail and press [ENTER].
Select IP to identify the remote IPSec router by its IP address.
Select DNS to identify the remote IPSec router by a domain name.
Select E-mail to identify the remote IPSec router by an e-mail address.
Content When you select IP in the Peer ID type field, type the IP address of the
computer with which you will make the VPN connection in the peer
Content field. The ZyWALL automatically uses the address in the Secure
Gateway Address field (refer to the Secure Gateway Address field
description) if you configure the peer Content field to 0.0.0.0 or leave it
blank.
It is recommended that you type an IP address other than 0.0.0.0 in the
peer Content field or use the DNS or E-mail ID type in the following
situations.
When you select DNS or E-mail in the Peer ID type field, type a domain
name or e-mail address by which to identify the remote IPSec router in the
peer Content field. Use up to 31 ASCII characters including spaces,
although trailing spaces are truncated. The domain name or e-mail
address is for identification purposes only and can be any string.
Secure Type the IP address or the domain name (up to 31 characters) of the
Gateway IPSec router with which you're making the VPN connection.
Address
Set this field to 0.0.0.0 if the remote IPSec router has a dynamic WAN IP
address (the Key Management field must be set to IKE, see later).
Protocol Enter 1 for ICMP, 6 for TCP, 17 for UDP, etc. 0 is the default and signifies
any protocol.
DNS Server If there is a private DNS server that services the VPN, type its IP address
here. The ZyWALL assigns this additional DNS server to the ZyWALL's
DHCP clients that have IP addresses in this IPSec rule's range of local
addresses.
A DNS server allows clients on the VPN to find other computers and
servers on the VPN by their (private) domain names.
37-8
Table 37-2 Menu 27.1.1: IPSec Setup
DESCRIPTION
When there is a NAT router between the two IPSec routers.
When you want the ZyWALL to distinguish between VPN
connection requests that come in from remote IPSec routers with
dynamic WAN IP addresses.
EXAMPLE
Zw50test.com.
tw
0
VPN/IPSec Setup