ZyXEL Communications ZyWall 10W User Manual page 223

LABEL
Client Mode
User Name
Password
Local
Address Type
Starting IP
Address
Ending IP
Address / Subnet
Mask
VPN Screens
Table 15-7 VPN IKE
Select Client Mode to have your ZyWALL use a username and password when
initiating this VPN connection to the extended authentication server ZyWALL. Only a
VPN extended authentication client can initiate this VPN connection.
Enter a user name for your ZyWALL to be authenticated by the external extended
authentication server. The user name can be up to 31 case-sensitive ASCII
characters, but spaces are not allowed. You must enter a user name and password
when you select client mode.
Enter the corresponding password for the above user name. The password can be
up to 31 case-sensitive ASCII characters, but spaces are not allowed.
Local IP addresses must be static and correspond to the remote IPSec router's
configured remote IP addresses.
Two active SAs can have the same configured local or remote IP address, but not
both. You can configure multiple SAs between the same local and remote IP
addresses, as long as only one is active at any time.
In order to have more than one active rule with the Secure Gateway Address field
set to 0.0.0.0, the ranges of the local IP addresses cannot overlap between rules.
If you configure an active rule with 0.0.0.0 in the Secure Gateway Address field and
the LAN's full IP address range as the local IP address, then you cannot configure
any other active rules with the Secure Gateway Addr field set to 0.0.0.0.
Use the drop-down menu to choose Single Address, Range Address, or Subnet
Address. Select Single Address for a single IP address. Select Range Address for
a specific range of IP addresses. Select Subnet Address to specify IP addresses on
a network by their subnet mask.
When the Address Type field is configured to Single Address, enter a (static) IP
address on the LAN behind your ZyWALL. When the Address Type field is
configured to Range Address, enter the beginning (static) IP address, in a range of
computers on your LAN behind your ZyWALL. When the Address Type field is
configured to Subnet Address, this is a (static) IP address on the LAN behind your
ZyWALL.
When the Address Type field is configured to Single Address, this field is N/A.
When the Address Type field is configured to Range Address, enter the end (static)
IP address, in a range of computers on the LAN behind your ZyWALL. When the
Address Type field is configured to Subnet Address, this is a subnet mask on the
LAN behind your ZyWALL.
ZyWALL Series Internet Security Gateway
DESCRIPTION
15-13