ZyXEL Communications Prestige 652H series User Manual page 229

LABEL
Remote
Remote IP addresses must be static and correspond to the remote IPSec router's configured local IP
addresses.
Two active SAs cannot have the local and remote IP address(es) both the same. Two active SAs can have
the same local or remote IP address, but not both. You can configure multiple SAs between the same local
and remote IP addresses, as long as only one is active at any time.
Remote Address
Type
IP Address Start
End / Subnet Mask
Address Information
My IP Address
Secure Gateway
Address
Security Protocol
VPN Screens
Table 16-9 VPN Manual Setup
Use the drop-down menu to choose Single, Range, or Subnet. Select Single with
a single IP address. Select Range for a specific range of IP addresses. Select
Subnet to specify IP addresses on a network by their subnet mask.
When the Remote Address Type field is configured to Single, enter a (static) IP
address on the network behind the remote IPSec router. When the Remote
Address Type field is configured to Range, enter the beginning (static) IP address,
in a range of computers on the network behind the remote IPSec router. When the
Remote Address Type field is configured to Subnet, enter a (static) IP address on
the network behind the remote IPSec router.
When the Remote Address Type field is configured to Single, this field is N/A.
When the Remote Address Type field is configured to Range, enter the end
(static) IP address, in a range of computers on the network behind the remote IPSec
router. When the Remote Address Type field is configured to Subnet, enter a
subnet mask on the network behind the remote IPSec router.
Enter the WAN IP address of your Prestige. The VPN tunnel has to be rebuilt if this
IP address changes.
The following applies if this field is configured as 0.0.0.0:
The Prestige uses the current Prestige WAN IP address (static or dynamic) to
set up the VPN tunnel.
If the WAN connection goes down, the Prestige uses the dial backup IP
address for the VPN tunnel when using dial backup or the LAN IP address
when using traffic redirect. See the chapter on WAN for details on dial backup
and traffic redirect.
Type the WAN IP address or the URL (up to 31 characters) of the IPSec router with
which you're making the VPN connection.
Prestige 652H/HW Series User's Guide
DESCRIPTION
16-25