ZyXEL Communications ZYWALL 5 Quick Start Manual page 16

Remote Network
If the Remote Network field is configured to Single, enter a (static) IP address on the network behind the remote
IPSec router. If the Remote Network field is configured to Range IP, enter the beginning and end (static) IP
address, in a range of computers on the network behind the remote IPSec router. If the Remote Network field is
configured to Subnet, enter a (static) IP address and subnet mask on the network behind the remote IPSec router.
3. Use the third wizard screen to configure IKE (Internet Key Exchange) tunnel settings.
Authentication Algorithm
MD5 (Message Digest 5) and SHA1 (Secure Hash Algorithm) are hash algorithms used to authenticate packet
data. Select MD5 for minimal security and SHA-1 for maximum security.
ZyWALL 5 Internet Security Appliance
15
Select Single for a single IP
address. Select Range IP for a
specific range of IP addresses.
Select Subnet to specify IP
addresses on a network by their
subnet mask.
Local Network
If the Local Network field is
configured to Single, enter a (static)
IP address on the LAN behind your
ZyWALL. If the Local Network field
is configured to Range IP, enter the
beginning and end (static) IP
address, in a range of computers on
the LAN behind your ZyWALL. If the
Local Network field is configured to
Subnet, enter a (static) IP address
and subnet mask on the LAN behind
your ZyWALL.
Negotiation Mode
Select Main Mode or Aggressive
Mode. Multiple SAs connecting
through a secure gateway must
have the same negotiation mode.
Encryption Algorithm
Select the method of data
encryption using a private (secret)
key.
The DES encryption algorithm uses
a 56-bit key. Triple DES (3DES) is a
variation on DES that uses a 168-bit
key. As a result, 3DES is more
secure than DES. It also requires
more processing power, resulting in
increased latency and decreased
throughput. This implementation of
AES uses a 128-bit key. AES is
faster than 3DES.