The Vpn Connection Screen - ZyXEL Communications UAG5100 User Manual

• In a VPN gateway, the UAG and remote IPSec router can use certificates to authenticate each
other. Make sure the UAG and the remote IPSec router will trust each other's certificates. See
Chapter 44 on page

30.2 The VPN Connection Screen

Click Configuration > VPN > IPSec VPN to open the VPN Connection screen. The VPN
Connection screen lists the VPN connection policies and their associated VPN gateway(s), and
various settings. In addition, it also lets you activate or deactivate and connect or disconnect each
VPN connection (each IPSec SA). Click a column's heading cell to sort the table entries by that
column's criteria. Click the heading cell again to reverse the sort order.
Figure 241 Configuration > VPN > IPSec VPN > VPN Connection
Each field is discussed in the following table. See
Table 155 Configuration > VPN > IPSec VPN > VPN Connection
LABEL
Ignore "Don't
Fragment"
setting in IPv4
header
Add
Edit
Remove
Activate
Inactivate
Connect
Disconnect
Object
Reference
Chapter 30 IPSec VPN
467.
DESCRIPTION
Select this to fragment packets larger than the MTU (Maximum Transmission Unit) that have
the "don't fragment" bit in the IP header turned on. When you clear this the UAG drops
packets larger than the MTU that have the "don't fragment" bit in the header turned on.
Click this to create a new entry.
Double-click an entry or select it and click Edit to open a screen where you can modify the
entry's settings.
To remove an entry, select it and click Remove. The UAG confirms you want to remove it
before doing so.
To turn on an entry, select it and click Activate.
To turn off an entry, select it and click Inactivate.
To connect an IPSec SA, select it and click Connect.
To disconnect an IPSec SA, select it and click Disconnect.
Select an entry and click Object Reference to open a screen that shows which settings use
the entry. See Section 10.3.2 on page 165
UAG Series User's Guide
Section 30.2.1 on page 341
for an example.
340
for more information.