P-793H V2 Vpn - ZyXEL Communications P-793H v2 Support Notes

P-793H v 2 Support Notes
15. When should I use FQDN?
If your VPN connection is P-793H v2 to P-793H v2, and both of them have static
IP address, and there is no NAT router in between, you can ignore this option.
Just leave Local/Peer ID type as IP, then skip this option.
If either side of VPN tunneling end point is using dynamic IP address, you may
need to configure ID for the one with dynamic IP address. And in this case,
"Aggressive mode" is recommended to be applied in phase 1 negotiation .

P-793H v2 VPN

1. How do I configure P-793H v2 VPN?
You can configure P-793H v2 for VPN using SMT or Web configurator.
2. What VPN protocols are supported by P-793H v2?
P-793H v2 supports ESP (protocol number 50) and AH (protocol number 51).
3. What types of authentication does P-793H v2 VPN support?
VPN vendors support a number of different authentication methods. P-793H
v2 VPN supports both SHA1 and MD5.
AH provides authentication, integrity, and replay protection (but not
confidentiality). Its main difference with ESP is that AH also secures parts of
the IP header of the packet (like the source/destination addresses), but ESP
does not.
ESP can provide authentication, integrity, replay protection, and confidentiality
of the data (it secures everything in the packet that follows the header). Replay
protection requires authentication and integrity (these two go always together).
Confidentiality (encryption) can be used with or without authentication/integrity.
Similarly, one could use authentication/integrity with or without confidentiality.
4. I am planning my P-793H v2-to-P-793H v2 VPN configuration. What do I
need to know?
First of all, both P-793H v2s must have VPN capabilities.
32
All contents copy right © 2010 Zy XEL Communications Corporation.