The Vpn Connection Screen; Figure 219 Vpn > Ipsec Vpn > Vpn Connection - ZyXEL Communications ZyWALL USG 300 User Manual

Chapter 21 IPSec VPN
• In any VPN connection, you have to select address objects to specify the local policy and
remote policy. You should set up the address objects first.
• In a VPN gateway, you can select an Ethernet interface, virtual Ethernet interface, VLAN
interface, or virtual VLAN interface to specify what address the ZyWALL uses as its IP
address when it establishes the IKE SA. You should set up the interface first. See
10 on page
• In a VPN gateway, you can enable extended authentication. If the ZyWALL is in server
mode, you should set up the authentication method (AAA server) first. The authentication
method specifies how the ZyWALL authenticates the remote IPSec router. See
on page
• In a VPN gateway, the ZyWALL and remote IPSec router can use certificates to
authenticate each other. Make sure the ZyWALL and the remote IPSec router will trust
each other's certificates. See

21.2 The VPN Connection Screen

Click VPN > IPSec VPN to open the VPN Connection screen. The VPN Connection screen
lists the VPN connection policies and their associated VPN gateway(s), and various settings.
In addition, it also lets you activate / deactivate and connect / disconnect each VPN connection
(each IPSec SA). Click a column's heading cell to sort the table entries by that column's
criteria. Click the heading cell again to reverse the sort order.
Except for dynamic IPSec VPN rules, each VPN connection requires a
corresponding policy route.
Dynamic IPSec VPN rules only require a corresponding policy route if you select Use Policy
Route to control dynamic IPSec rules.
The VPN wizard automatically creates a corresponding policy route. If you create the VPN
connection in the VPN > IPSec VPN screens, you need to manually create a corresponding
policy route.
Figure 219 VPN > IPSec VPN > VPN Connection
336
179.
607.
Chapter 42 on page 621.
ZyWALL USG 300 User's Guide
Chapter
Chapter 40