Vpn Rules (Ike): Network Policy Edit - ZyXEL Communications ZyWALL 2Plus User Manual

ZyWALL 2 Plus User's Guide
Table 55 VPN Rules (IKE): Gateway Policy: Edit (continued)
LABEL
Enable Multiple
Proposals
Associated
Network Policies
#
Name
Local Network
Remote Network
Apply
Cancel

11.4 VPN Rules (IKE): Network Policy Edit

Click VPN and the add network policy (
the VPN-Network Policy -Edit screen. Use this screen to configure a network policy. A
network policy identifies the devices behind the IPSec routers at either end of a VPN tunnel
and specifies the authentication, encryption and other settings needed to negotiate a phase 2
IPSec SA.
200
DESCRIPTION
Select this check box to allow the ZyWALL to use any of its phase 1 or phase 2
encryption and authentication algorithms when negotiating an IPSec SA.
When you enable multiple proposals, the ZyWALL allows the remote IPSec router
to select which encryption and authentication algorithms to use for the VPN
tunnel, even if they are less secure than the ones you configure for the VPN rule.
Clear this check box to have the ZyWALL use only the phase 1 or phase 2
encryption and authentication algorithms configured below when negotiating an
IPSec SA.
The following table shows the policy(ies) you configure for this rule.
To add a VPN policy, click the add network policy (
(IKE) screen (see Figure 92 on page
more information.
This field displays the policy index number.
This field displays the policy name.
This field displays one or a range of IP address(es) of the computer(s) behind the
ZyWALL.
This field displays one or a range of IP address(es) of the remote network behind
the remote IPsec router.
Click Apply to save your changes back to the ZyWALL.
Click Cancel to exit this screen without saving.
193). Refer to Section 11.4 on page 200
) icon in the VPN Rules (IKE) screen to display
) icon in the VPN Rules
for
Chapter 11 IPSec VPN