NEC ZA-SA3500G Function Manual page 222

■Operation depends on the combination of local ID and remote ID of IKE Phase 1
*IKE_SA_INIT exchange is applicable in IKEv2
Connection
Type
Pattern 1 Not specified
(local WAN IP address (no subnet))
Pattern 2 Specified (character string)
(IP address, FQDN, Key-ID, User-
FQDN)
Pattern 3 Not specified
(local WAN IP address (no subnet))
Pattern 4 Specified (character string)
(IP address, FQDN, Key-ID, User-
FQDN)
Pattern 5 Not specified
(local WAN IP address (no subnet))
Pattern 6 Specified (character string)
(IP address, FQDN, Key-ID, User-
FQDN)
■Operation depends on the combination of local ID and remote ID of IKE Phase 2
・IPsec tunnel destination subnet can be connected one to multiple (2-5), or to all subnets.
・Setting methods of the local and remote IDs of IKE Phase 2 when each subnet is connected are as follows.
N is specified from 2~5, ALL means all subnets
*For IKEv2, local traffic selector and remote traffic selector for IKE_AUTH exchange are applicable.
Connection Type
Single subnet
connection
Two or more
subnet connection
All subnet
connection*
222 Setting/Setting
Local ID
LAN-WAN Connection
Pattern
1:1
N:1
ALL:1
1:N
N:N
ALL:N
1:ALL
N:ALL
Confirmation|
Remote ID
Not specified
(peer IP address (no subnet))
Not specified
(peer IP address (no subnet))
Specified (character string)
(IP address, FQDN, Key-ID, User-
FQDN)
Specified (character string)
(IP address, FQDN, Key-ID, User-
FQDN)
Not specified
(Unused)
Not specified
(Unused)
Local ID
(Local Traffic Selector)
1 specification
N specification
0.0.0.0/0 or not specified
(blank)
1 specification
N specification
0.0.0.0/0 or not specified
(blank)
1 specification
N specification
Used Remarks
○
○
○
○
○ Destination site
any time
○ Destination site
any time
Remote ID
(Remote Traffic Selector)
1 specification
1 specification
1 specification
N specification
N specification
N specification
0.0.0.0/0 or not specified
(blank)
0.0.0.0/0 or not specified
(blank)