Before You Begin; The Vpn Connection Screen - ZyXEL Communications ZyWALL USG 300 User Manual

Chapter 21 IPSec VPN
• See Section 21.6 on page 382
• See Section 6.5 on page 120

21.1.3 Before You Begin

This section briefly explains the relationship between VPN tunnels and other
features. It also gives some basic suggestions for troubleshooting.
You should set up the following features before you set up the VPN tunnel.
• In any VPN connection, you have to select address objects to specify the local
policy and remote policy. You should set up the address objects first.
• In a VPN gateway, you can select an Ethernet interface, virtual Ethernet
interface, VLAN interface, or virtual VLAN interface to specify what address the
ZyWALL uses as its IP address when it establishes the IKE SA. You should set up
the interface first. See
• In a VPN gateway, you can enable extended authentication. If the ZyWALL is in
server mode, you should set up the authentication method (AAA server) first.
The authentication method specifies how the ZyWALL authenticates the remote
IPSec router. See
• In a VPN gateway, the ZyWALL and remote IPSec router can use certificates to
authenticate each other. Make sure the ZyWALL and the remote IPSec router
will trust each other's certificates. See

21.2 The VPN Connection Screen

Click VPN > IPSec VPN to open the VPN Connection screen. The VPN
Connection screen lists the VPN connection policies and their associated VPN
gateway(s), and various settings. In addition, it also lets you activate / deactivate
and connect / disconnect each VPN connection (each IPSec SA). Click a column's
heading cell to sort the table entries by that column's criteria. Click the heading
cell again to reverse the sort order.
Note: Except for dynamic IPSec VPN rules, each VPN connection requires a
corresponding policy route.
Dynamic IPSec VPN rules only require a corresponding policy route if you select
Use Policy Route to control dynamic IPSec rules.
356
for IPSec VPN background information.
for an example of configuring IPSec VPN.
Chapter 10 on page
Chapter 41 on page 673.
Chapter 43 on page
177.
689.
ZyWALL USG 300 User's Guide