The Default_L2Tpvpn Ipsec Vpn Rule - ZyXEL Communications SBG3300-N000 User Manual

Chapter 20 IPSec VPN
Table 90 VPN > IPSec VPN > Setup > Edit (continued)
LABEL
Local/Remote IP
Address
Local/Remote
Subnet Mask
Apply
Cancel

20.4.3 The Default_L2TPVPN IPSec VPN Rule

A default IPSec VPN rule (Default_L2TP_VPN) is predefined. It can be edited but cannot be
removed. This rule is used for L2TP VPN exclusively and is disabled by default.
The following table lists the default settings for the Default_L2TP_VPN IPSec VPN.
Table 91 Default settings for Default_L2TP_VPN
Enabled
Nailed-up
NAT Traversal
Application Scenario
My Address
Life time
Negotiation Mode
Encryption /
Authentication
Key Group
Dead Peer Detection
(DPD)
XAUTH
286
DESCRIPTION
If you select Single in the Local/Remote IP Type field, specify the IP addresses of
the devices behind the Device that can use the VPN tunnel. The local IP addresses must
correspond to the remote IPSec router's configured remote IP addresses.
Two active SAs cannot have the local and remote IP address(es) both the same. Two
active SAs can have the same local or remote IP address, but not both. You can
configure multiple SAs between the same local and remote IP addresses, as long as
only one is active at any time.
If you select Subnet in the Local/Remote IP Type field, enter a subnet mask on the
LAN behind your Device.
Click Apply to save your changes back to the Device.
Click Cancel to restore your previous settings.
GENERAL
No
No
Yes
Remote Access
Any
PHASE 1
86400
Main
3DES / SHA1
3DES / MD5
AES256 / SHA1
DH2
Yes
No
AUTHENTICATION
Pre-Shared Key
Certificate
Local ID Type
Content
Remote ID Type
PHASE 2
Life time
Tunnel Mode
Encryption
Authentication
Perfect Forward Secrecy
(PFS)
Encapsulation
SBG3300-N Series User's Guide
selected (text) 12345678
none
IP
0.0.0.0
Any
3600
ESP
DES
3DES
AES256
MD5
SHA1
No
Transport