ZyXEL Communications ISG50-ISDN User Manual page 373

Each field is described in the following table.
Table 123 Configuration > VPN > IPSec VPN > VPN Connection > Edit
LABEL
Show Advance
Settings / Hide
Advance Settings
Create new Object
General Settings
Enable
Connection
Name
Nailed-Up
Enable Replay
Detection
Enable NetBIOS
Broadcast over
IPSec
VPN Gateway
Application
Scenario
VPN Gateway
Manual Key
Policy
Local Policy
Remote Policy
ISG50 User's Guide
DESCRIPTION
Click this button to display a greater or lesser number of configuration fields.
Use to configure any new settings objects that you need to use in this screen.
Select this check box to activate this VPN connection.
Type the name used to identify this IPSec SA. You may use 1-31 alphanumeric
characters, underscores( ), or dashes (-), but the first character cannot be a
_
number. This value is case-sensitive.
Select this if you want the ISG50 to automatically renegotiate the IPSec SA
when the SA life time expires.
Select this check box to detect and reject old or duplicate packets to protect
against Denial-of-Service attacks.
Select this check box if you the ISG50 to send NetBIOS (Network Basic Input/
Output System) packets through the IPSec SA.
NetBIOS packets are TCP or UDP packets that enable a computer to connect to
and communicate with a LAN. It may sometimes be necessary to allow
NetBIOS packets to pass through IPSec SAs in order to allow local computers
to find computers on the remote network and vice versa.
Select the scenario that best describes your intended VPN connection.
Site-to-site - Choose this if the remote IPSec router has a static IP address
or a domain name. This ISG50 can initiate the VPN tunnel.
Site-to-site with Dynamic Peer - Choose this if the remote IPSec router
has a dynamic IP address. Only the remote IPSec router can initiate the VPN
tunnel.
Remote Access (Server Role) - Choose this to allow incoming connections
from IPSec VPN clients. The clients have dynamic IP addresses and are also
known as dial-in users. Only the clients can initiate the VPN tunnel.
Remote Access (Client Role) - Choose this to connect to an IPSec server.
This ISG50 is the client (dial-in user) and can initiate the VPN tunnel.
Select the VPN gateway this VPN connection is to use or select Create Object
to add another VPN gateway for this VPN connection to use.
Select this option to configure a VPN connection policy that uses a manual key
instead of IKE key management. This may be useful if you have problems with
IKE key management. See
the manual key fields.
Note: Only use manual key as a temporary solution, because it is not as secure
as a regular IPSec SA.
Select the address corresponding to the local network. Use Create new
Object if you need to configure a new one.
Select the address corresponding to the remote network. Use Create new
Object if you need to configure a new one.
Section 24.2.2 on page 377
Chapter 24 IPSec VPN
for how to configure
373