ZyXEL Communications ZyWALL 70 Quick Start Manual page 14

Internet security appliance

Hide thumbs Also See for ZyWALL 70:

Table of Contents

Step 4.

Use the forth wizard screen to configure IPSec settings.

Step 5.

This read-only screen shows the status of the current VPN setting. Use the summary table to

check whether what you have configured is correct.

ZyWALL 70 Internet Security Appliance

Choose Tunnel mode or Transport mode.

Choose which protocol to use (ESP or AH)

for the IKE key exchange.

Choose an encryption algorithm or select

NULL to set up a tunnel without encryption.

Choose an authentication algorithm.

Set the IPSec SA lifetime. This field allows

you to determine how long the IPSec SA

should stay up before it times out.

Choose whether to enable Perfect Forward

Secrecy (PFS) using Diffie-Hellman public-

key cryptography. Select None (the default)

to disable PFS. DH1 refers to Diffie-Hellman

Group 1 a 768 bit random number. DH2

refers to Diffie-Hellman Group 2 a 1024 bit

(1Kb) random number (more secure, yet

slower).

Click Finish to save and complete the wizard

setup. Otherwise, click Back to return to the

previous screen.

Table of Contents