ZyXEL Communications Wireless Router P-334 User Manual page 320

Prestige 334 User's Guide
Table 105 Menu 27.1.1 IPSec Setup
FIELD
Content
My IP Addr
Peer ID type
Content
Secure
Gateway
Address
Protocol
Local
Addr Type This field displays SINGLE for a single IP address.
Local IP Addr Enter a static IP address on the LAN behind your Prestige.
319
DESCRIPTION
When you select IP in the Local ID Type field, type the IP address of your computer or
leave the field blank to have the Prestige automatically use its own IP address.
When you select DNS in the Local ID Type field, type a domain name (up to 31 char-
acters) by which to identify this Prestige.
When you select E-mail in the Local ID Type field, type an e-mail address (up to 31
characters) by which to identify this Prestige.
The domain name or e-mail address that you use in the Content field is used for
identification purposes only and does not need to be a real domain name or e-mail
address.
Enter the IP address of your Prestige. The Prestige uses its current WAN IP address
(static or dynamic) in setting up the VPN tunnel if you leave this field as 0.0.0.0.
The VPN tunnel has to be rebuilt if this IP address changes.
Press [SPACE BAR] to choose IP, DNS, or E-mail and press [ENTER].
Select IP to identify the remote IPSec router by its IP address.
Select DNS to identify the remote IPSec router by a domain name.
Select E-mail to identify the remote IPSec router by an e-mail address.
When you select IP in the Peer ID Type field, type the IP address of the computer with
which you will make the VPN connection or leave the field blank to have the Prestige
automatically use the address in the Secure Gateway Address field.
When you select DNS in the Peer ID Type field, type a domain name (up to 31 charac-
ters) by which to identify the remote IPSec router.
When you select E-mail in the Peer ID Type field, type an e-mail address (up to 31
characters) by which to identify the remote IPSec router.
The domain name or e-mail address that you use in the Content field is used for
identification purposes only and does not need to be a real domain name or e-mail
address. The domain name also does not have to match the remote router's IP
address or what you configure in the Secure Gateway Address field below.
Type the IP address or the domain name (up to 31 characters) of the IPSec router with
which you're making the VPN connection.
Set this field to 0.0.0.0 if the remote IPSec router has a dynamic WAN IP address (the
Key Management field must be set to IKE, see later).
Enter 1 for ICMP, 6 for TCP, 17 for UDP, etc. 0 is the default and signifies any protocol.
Local IP addresses must be static and correspond to the remote IPSec router's config-
ured remote IP addresses.
Two active SAs cannot have the local and remote IP address(es) both the same. Two
active SAs can have the same local or remote IP address, but not both. You can
configure multiple SAs between the same local and remote IP addresses, as long as
only one is active at any time.
Chapter 34 VPN/IPSec Setup