ZyXEL Communications SBG5500 Series User Manual page 165

Table 71 Configuration > VPN > IPsec VPN
LABEL DESCRIPTION
Edit Double-click an entry or select it and click Edit to open a screen where you can modify
the entry's settings.
Remove To remove an existing entry, select it and click Remove.
# This field displays the VPN gateway index number.
Status This field displays whether the IPsec VPN gateway is active or not. A green ON button
signifies that this IPsec VPN gateway is active. A gray OFF button signifies that this IPsec
VPN gateway is not active.
Name This field displays the identification name for this VPN gateway.
My Address This field displays the interface the VPN gateway uses.
Secure Gateway This field displays the peer gateway address of the IPsec router with which you are
making the VPN connection.
VPN Connection This field displays which VPN connection use this gateway.
IKE Version This field displays the IKE Version the VPN gateway uses.
Connection Configuration
Add Click this to configure a new entry.
Edit Double-click an entry or select it and click Edit to open a screen where you can modify
the entry's settings.
Remove To remove an existing entry, select it and click Remove.
Connect To connect an IPsec SA, select it and click Connect.
Disconnect To disconnect an IPsec SA, select it and click Disconnect.
# This field displays the VPN connection index number.
Status This field displays whether the IPsec VPN connection is active or not. A green ON button
signifies that this IPsec VPN connection is active. A gray OFF button signifies that this IPsec
VPN connection is not active.
Tunnel This shows a lit up globe if the VPN tunnel is connected or and a gray globe when it is
disconnected.
Full Tunnel This field displays whether the SBG sends packets through the VPN tunnel or not.
Name This field displays the identification name for this VPN policy.
VPN Gateway This field displays the VPN gateway the VPN connection uses.
Encapsulation This field displays the type of encapsulation the IPsec SA uses,
Algorithm This field displays the encryption algorithm used in the IKE SA.
Policy This field displays the remote and local policy.
Application Scenario This field is read-only and shows the scenario that the SBG supports.
Site-to-site - The remote IPsec router needs to have a static IP address or a domain name.
This SBG can initiate the VPN tunnel.
Site-to-site with Dynamic Peer - Choose this if the remote IPsec router has a dynamic IP
address. Only the remote IPsec router can initiate the VPN tunnel.
Remote Access (Server Role) - Choose this to allow incoming connections from IPsec VPN
clients. The clients have dynamic IP addresses and are also known as dial-in users. Only
the clients can initiate the VPN tunnel.
Remote Access (Client Role) - Choose this to connect to an IPsec server. This SBG is the
client (dial-in user) and can initiate the VPN tunnel.
Apply Click Apply to save your changes.
Reset Click Reset to restore your previously saved settings.
Chapter 10 VPN
SBG5500/3310 Series User's Guide
165