Manual Key Setup; Configuring Manual Key - ZyXEL Communications ZyWall 10W User Manual

ZyWALL Series Internet Security Gateway
LABEL
Apply
Cancel

15.14 Manual Key Setup

Manual key management is useful if you have problems with IKE key management.
15.14.1 Security Parameter Index (SPI)
An SPI is used to distinguish different SAs terminating at the same destination and using the same IPSec
protocol. This data allows for the multiplexing of SAs to a single gateway. The SPI (Security Parameter
Index) along with a destination IP address uniquely identify a particular Security Association (SA). The SPI
is transmitted from the remote VPN gateway to the local VPN gateway. The local VPN gateway then uses
the network, encryption and key values that the administrator associated with the SPI to establish the tunnel.
Current ZyXEL implementation assumes identical outgoing and incoming SPIs.

15.15 Configuring Manual Key

You only configure VPN Manual Key when you select Manual in the Key Management field on the VPN
IKE screen. This is the VPN Manual Key screen as shown next.
15-24
Table 15-8 VPN IKE: Advanced
Click Apply to save your changes back to the ZyWALL and return to the Configure-
IKE screen.
Click Cancel to return to the Configure-IKE screen without saving your changes.
DESCRIPTION
VPN Screens