ZyXEL Communications ZYWALL2 ET 2WE User Manual page 221

LABEL
Local IP Address Enter a static local IP address. The local IP address must correspond to the remote IPSec
router's configured remote IP addresses.
Site to Site Select this radio button to establish a VPN between two sites (groups of IP addresses).
Address Type Use the drop-down menu to choose Range Address or Subnet Address. Select Range
Address for a specific range of IP addresses. Select Subnet Address to specify IP
addresses on a network by their subnet mask.
Starting IP When the Address Type field is configured to Range Address, enter the beginning
Address (static) IP address, in a range of computers on your LAN behind your ZyWALL. When the
Address Type field is configured to Subnet Address, this is a (static) IP address on the
LAN behind your ZyWALL.
When the Address Type field is configured to Range Address, enter the end (static) IP
Ending IP
Address/ Subnet address, in a range of computers on the LAN behind your ZyWALL. When the Address
Mask Type field is configured to Subnet Address, this is a subnet mask on the LAN behind
your ZyWALL.
Remote:
Remote IP addresses must be static and correspond to the remote IPSec router's configured local IP
addresses. The remote fields do not apply when the Secure Gateway Address field is configured to 0.0.0.0.
In this case only the remote IPSec router can initiate the VPN.
Two active SAs cannot have the local and remote IP address(es) both the same. Two active SAs can have
the same local or remote IP address, but not both. You can configure multiple SAs between the same local
and remote IP addresses, as long as only one is active at any time.
Address Type Use the drop-down menu to choose Single Address, Range Address, or Subnet
Address. Select Single Address with a single IP address. Select Range Address for a
specific range of IP addresses. Select Subnet Address to specify IP addresses on a
network by their subnet mask.
When the Address Type field is configured to Single Address, enter a (static) IP address
Starting IP
Address on the network behind the remote IPSec router. When the Addr Type field is configured to
Range Address, enter the beginning (static) IP address, in a range of computers on the
network behind the remote IPSec router. When the Address Type field is configured to
Subnet Address, enter a (static) IP address on the network behind the remote IPSec
router.
VPN Screens
Table 14-7 Basic IKE VPN Rule Edit
ZyWALL 2 Series User's Guide
DESCRIPTION
14-15