ZyXEL Communications PRESTIGE 652H User Manual page 205

LABEL
Remote Address
Type
IP Address Start
End / Subnet Mask
My IP Address
Secure Gateway IP
Address
SPI
Encapsulation Mode
IPSec Protocol
VPN Screens
Table 17-9 VPN Manual Setup
Use the drop-down menu to choose Single, Range, or Subnet. Select Single with a
single IP address. Select Range for a specific range of IP addresses. Select Subnet to
specify IP addresses on a network by their subnet mask.
When the Remote Address Type field is configured to Single, enter a (static) IP
address on the network behind the remote IPSec router. When the Remote Address
Type field is configured to Range, enter the beginning (static) IP address, in a range of
computers on the network behind the remote IPSec router. When the Remote
Address Type field is configured to Subnet, enter a (static) IP address on the network
behind the remote IPSec router.
When the Remote Address Type field is configured to Single, enter the IP address in
the IP Address Start field again here. When the Remote Address Type field is
configured to Range, enter the end (static) IP address, in a range of computers on the
network behind the remote IPSec router. When the Remote Address Type field is
configured to Subnet, enter a subnet mask on the network behind the remote IPSec
router.
Enter the WAN IP address of your Prestige. The Prestige uses its current WAN IP
address (static or dynamic) in setting up the VPN tunnel if you leave this field as
0.0.0.0. The VPN tunnel has to be rebuilt if this IP address changes.
Type the WAN IP address or the URL (up to 31 characters) of the IPSec router with
which you're making the VPN connection. Set this field to 0.0.0.0 if the remote IPSec
router has a dynamic WAN IP address (the IPSec Key Mode field must be set to IKE).
Type a unique SPI from one to four characters long. Valid Characters are "0, 1, 2, 3, 4,
5, 6, 7, 8, and 9".
Select Tunnel mode or Transport mode from the drop-down list box.
Select ESP if you want to use ESP (Encapsulation Security Payload). The ESP
protocol (RFC 2406) provides encryption as well as some of the services offered by
AH. If you select ESP here, you must select options from the Authentication
Algorithm field (described later).
Prestige 652 Series User's Guide
DESCRIPTION
17-21