ZyXEL Communications ZyWall USG 300 User Manual page 471

Unified security gateway

Hide thumbs Also See for ZyWall USG 300:

Table of Contents

SA). Click a column's heading cell to sort the table entries by that column's

criteria. Click the heading cell again to reverse the sort order.

Figure 352 Configuration > VPN > IPSec VPN > VPN Connection

Each field is discussed in the following table. See

Section 25.2.1 on page 472

Table 125 Configuration > VPN > IPSec VPN > VPN Connection

packet header

ZyWALL USG 300 User's Guide

for more information.

Select this to be able to use policy routes to manually specify the

destination addresses of dynamic IPSec rules. You must manually create

these policy routes. The ZyWALL automatically obtains source and

destination addresses for dynamic IPSec rules that do not match any of

the policy routes.

Clear this to have the ZyWALL automatically obtain source and

destination addresses for all dynamic IPSec rules.

Section 6.4.2 on page 97

Select this to fragment packets larger than the MTU (Maximum

Transmission Unit) that have the "don't" fragment" bit in the IP header

turned on. When you clear this the ZyWALL drops packets larger than the

MTU that have the "don't" fragment" bit in the header turned on.

Click this to create a new entry.

Double-click an entry or select it and click Edit to open a screen where

you can modify the entry's settings.

To remove an entry, select it and click Remove. The ZyWALL confirms

you want to remove it before doing so.

To turn on an entry, select it and click Activate.

To turn off an entry, select it and click Inactivate.

To connect an IPSec SA, select it and click Connect.

To disconnect an IPSec SA, select it and click Disconnect.

Chapter 25 IPSec VPN

Section 25.2.2 on page 479

for how this option affects the routing table.

Troubleshooting