Vpn Rules (Ike); Figure 202 Gateway And Network Policies; Figure 203 Ipsec Fields Summary - ZyXEL Communications ZYWALL 35 User Manual

You can usually provide a static IP address or a domain name for the ZyWALL. Sometimes,
your ZyWALL might also offer another alternative, such as using the IP address of a port or
interface.
You can usually provide a static IP address or a domain name for the remote IPSec router as
well. Sometimes, you might not know the IP address of the remote IPSec router (for example,
telecommuters). In this case, you can still set up the IKE SA, but only the remote IPSec router
can initiate an IKE SA.

18.2 VPN Rules (IKE)

A VPN (Virtual Private Network) tunnel gives you a secure connection to another computer or
network.
• A gateway policy contains the IKE SA settings. It identifies the IPSec routers at either end
of a VPN tunnel.
• A network policy contains the IPSec SA settings. It specifies which devices (behind the
IPSec routers) can use the VPN tunnel.

Figure 202 Gateway and Network Policies

This figure helps explain the main fields in the VPN setup.

Figure 203 IPSec Fields Summary

ZyWALL 5/35/70 Series User's Guide
Chapter 18 IPSec VPN
353