ZyXEL Communications ISG50-ISDN User Manual page 383

Table 126 Configuration > VPN > IPSec VPN > VPN Gateway > Edit (continued)
LABEL
Local ID Type
Content
Peer ID Type
ISG50 User's Guide
DESCRIPTION
This field is read-only if the ISG50 and remote IPSec router use certificates to
identify each other. Select which type of identification is used to identify the
ISG50 during authentication. Choices are:
IP - the ISG50 is identified by an IP address
DNS - the ISG50 is identified by a domain name
E-mail - the ISG50 is identified by an e-mail address
This field is read-only if the ISG50 and remote IPSec router use certificates to
identify each other. Type the identity of the ISG50 during authentication. The
identity depends on the Local ID Type.
IP - type an IP address; if you type 0.0.0.0, the ISG50 uses the IP address
specified in the My Address field. This is not recommended in the following
situations:
• There is a NAT router between the ISG50 and remote IPSec router.
• You want the remote IPSec router to be able to distinguish between IPSec
SA requests that come from IPSec routers with dynamic WAN IP
addresses.
In these situations, use a different IP address, or use a different Local ID
Type.
DNS - type the domain name; you can use up to 31 ASCII characters
including spaces, although trailing spaces are truncated. This value is only
used for identification and can be any string.
E-mail - the ISG50 is identified by an e-mail address; you can use up to 31
ASCII characters including spaces, although trailing spaces are truncated.
This value is only used for identification and can be any string.
Select which type of identification is used to identify the remote IPSec router
during authentication. Choices are:
IP - the remote IPSec router is identified by an IP address
DNS - the remote IPSec router is identified by a domain name
E-mail - the remote IPSec router is identified by an e-mail address
Any - the ISG50 does not check the identity of the remote IPSec router
If the ISG50 and remote IPSec router use certificates, there is one more
choice.
Subject Name - the remote IPSec router is identified by the subject name in
the certificate
Chapter 24 IPSec VPN
383