ZyXEL Communications ZyWALL USG 200 Series User Manual page 475

SA). Click a column's heading cell to sort the table entries by that column's
criteria. Click the heading cell again to reverse the sort order.
Figure 353 Configuration > VPN > IPSec VPN > VPN Connection
Each field is discussed in the following table. See
Section 25.2.1 on page 476
Table 126 Configuration > VPN > IPSec VPN > VPN Connection
LABEL
Use Policy
Route to
control
dynamic
IPSec rules
Ignore
""Don't
Fragment""
setting in
packet header
Add
Edit
Remove
Activate
Inactivate
Connect
Disconnect
ZyWALL USG 100/200 Series User's Guide
for more information.
DESCRIPTION
Select this to be able to use policy routes to manually specify the
destination addresses of dynamic IPSec rules. You must manually create
these policy routes. The ZyWALL automatically obtains source and
destination addresses for dynamic IPSec rules that do not match any of
the policy routes.
Clear this to have the ZyWALL automatically obtain source and
destination addresses for all dynamic IPSec rules.
See Section 6.4.2 on page 98
Select this to fragment packets larger than the MTU (Maximum
Transmission Unit) that have the "don't" fragment" bit in the IP header
turned on. When you clear this the ZyWALL drops packets larger than the
MTU that have the "don't" fragment" bit in the header turned on.
Click this to create a new entry.
Double-click an entry or select it and click Edit to open a screen where
you can modify the entry's settings.
To remove an entry, select it and click Remove. The ZyWALL confirms
you want to remove it before doing so.
To turn on an entry, select it and click Activate.
To turn off an entry, select it and click Inactivate.
To connect an IPSec SA, select it and click Connect.
To disconnect an IPSec SA, select it and click Disconnect.
Chapter 25 IPSec VPN
Section 25.2.2 on page 483
for how this option affects the routing table.
and
475