Vpn Rules (Ike); Figure 127 Gateway And Network Policies; Figure 128 Ipsec Fields Summary - ZyXEL Communications ZYWALL P1 User Manual

You can usually provide a static IP address or a domain name for the ZyWALL. Sometimes,
your ZyWALL might also offer another alternative, such as using the IP address of a port or
interface.
You can usually provide a static IP address or a domain name for the remote IPSec router as
well. Sometimes, you might not know the IP address of the remote IPSec router (for example,
telecommuters). In this case, you can still set up the IKE SA, but only the remote IPSec router
can initiate an IKE SA.

13.2 VPN Rules (IKE)

A VPN (Virtual Private Network) tunnel gives you a secure connection to another computer or
network.
• A gateway policy contains the IKE SA settings. It identifies the IPSec routers at either end
of a VPN tunnel.
• A network policy contains the IPSec SA settings. It specifies which devices (behind the
IPSec routers) can use the VPN tunnel.

Figure 127 Gateway and Network Policies

This figure helps explain the main fields in the VPN setup.

Figure 128 IPSec Fields Summary

ZyWALL P1 User's Guide
Chapter 13 IPSec VPN
203