ZyXEL Communications LTE6100 User Manual page 88

Chapter 13 VPN
Table 37 IPSec VPN: Add
LABEL
NAT Traversal
Tunnel Name
Mode
Local
Local Address
Type
IP Address
Start
End/Subnet
Mask
Remote
Remote
Address Type
IP Address
Start
End/Subnet
Mask
Address Information
WAN Interface Select the interface for the VPN gateway.
My IP Address
Secure
Gateway
Address
Local ID
88
DESCRIPTION
Select this if any of these conditions are satisfied.
• This IKE SA might be used to negotiate IPSec SAs that use ESP as the active
protocol.
• There are one or more NAT routers between the LTE Device and remote IPSec
router, and these routers do not support IPSec pass-thru or a similar feature.
The remote IPSec router must also enable NAT traversal, and the NAT routers
have to forward packets with UDP port 500 and UDP 4500 headers unchanged.
Enter the name of the VPN connection.
Select the encapsulation mode. When net-net is selected, the connection will
operate in tunnel mode.
Select Single or Subnet to specify if the VPN connection begins at an IP address
or subnet.
If Single is selected, enter a (static) IP address on the LAN behind your LTE
Device.
If Subnet is selected, specify IP addresses on a network by their subnet mask
by entering a (static) IP address on the LAN behind your LTE Device. Then enter
the subnet mask to identify the network address.
If Subnet is selected, enter the subnet mask to identify the network address.
Select Single or Subnet to specify if the VPN connection terminates at an IP
address or subnet.
If Single is selected, enter a (static) IP address on the LAN behind the remote
IPSec's router.
If Subnet is selected, specify IP addresses on a network by their subnet mask
by entering a (static) IP address on the LAN behind the remote IPSec's router.
Then enter the subnet mask to identify the network address.
If Subnet is selected, enter the subnet mask to identify the network address.
Enter the IP address of the LTE Device in the IKE SA.
Enter the IP address of the remote IPSec router in the IKE SA.
Select IP to identify the LTE Device by its IP address.
Select DNS to identify this LTE Device by a domain name.
Select E-mail to identify this LTE Device by an e-mail address.
LTE6100 User's Guide