K19. Does Zywall Support Dynamic Secure Gateway Ip - ZyXEL Communications ZyWALL 5 Support Notes

ZyWALL 5 Support Notes
indistinguishable, and VPN will not work.
Secure Gateway IP Address -- This must be a public, routable IP address, private IP is not allowed. That
means it can not be in the 10.x.x.x subnet, the 192.168.x.x subnet, nor in the range 172.16.0.0 -
172.31.255.255 (these address ranges are reserved by internet standard for private LAN numberings
behind NAT devices). It is usually a static IP so that we can pre-configure it in ZyWALL for making VPN
connections. If it is a dynamic IP given by ISP, you still can configure this IP address after the remote
ZyWALL is on-line and its WAN IP is available from ISP.

K19. Does ZyWALL support dynamic secure gateway IP?

If the remote VPN gateways uses dynamic IP, we enter 0.0.0.0 as the Secure Gateway IP Address in
ZyWALL. In this case, the VPN connection can only be initiated from dynamic side to fixed side in order
to update its dynamic IP to the fixed side. However, if both gateways use dynamic IP addresses, it is no
way to establish VPN connection at all.
K20. What VPN gateway that has been tested with ZyWALL successfully?
We have tested ZyWALL successfully with the following third party VPN gateways.
Cisco 1720 Router, IOS 12.2(2)XH, IP/ADSL/FW/IDS PLUS IPSEC 3DES
NetScreen 5, ScreenOS 2.6.0r6
SonicWALL SOHO 2
WatchGuard Firebox II
ZyXEL ZyWALL 100
Avaya VPN
Netopia VPN
III VPN
K21. What VPN software that has been tested with ZyWALL successfully?
We have tested ZyWALL successfully with the following third party VPN software.
SafeNet Soft-PK, 3DES edition
Checkpoint Software
SSH Sentinel, 1.4
SecGo IPSec for Windows
F-Secure IPSec for Windows
KAME IPSec for UNIX
Nortel IPSec for UNIX
293
All contents copyright (c) 2006 ZyXEL Communications Corporation.