ZyXEL Communications P-334WT Support Notes page 41

private IP address as the content of it's phase 1 ID. So you have to configure P-334WT's secure gateway's phase 1 ID as the private IP
address of the VPN client. The configuration will be like this,
15. How can I keep a tunnel alive?
To keep a tunnel alive, you can check "keep alive" option when configuring your VPN tunnel. With this option, whenever phase 2 SA
lifetime is due, IKE negotiation procedure will be invoked automatically even without traffic to make the connection stay.
But to reduce the consumption of system resource, if VPN tunnels get disconnected either manually, by idle timer, or because of power
cycle, packet triggering is still necessary to make the tunnel up.
16. Can the whole LAN behind P-334WT be protected by VPN/IPSec tunnel?
No, it can't. P-334WT is designed for Telecommuter. Only one PC assigned in the Local IP Addr of VPN rule can be protected via VPN/
IPSec.
17. Can P-334WT support IPSec passthrough?
Yes, P-334WT can support IPSec passthrough. P-334WT doesn't only support IPSec/VPN gateway, it can also be a NAT router supporting
IPSec passthrough.
If the VPN connection is initiated from the security gateway behind P-334WT, no configuration is necessary for NAT nor Firewall.
If the VPN connection is initiated from the security gateway outside of P-334WT, NAT port forwarding and Firewall forwarding are
necessary.
To configure NAT port forwarding, please go to WEB interface, Setup/ "SUA/NAT", put the secure gateway's IP address in default server.
To configure Firewall forwarding, please go to WEB interface, Setup/Firewall, select Packet Direction to WAN to LAN, and create a
firewall rule the forwards IKE(UDP:500).
18. Can P-334WT behave as a NAT router supporting IPSec passthrough and an IPSec gateway simultaneously ?
No, current P-334WT can't support them simultaneously. You need to choose either one. If P-334WT is to support IPSec passthrough, you
have to disable the VPN function on P-334WT. To disable it, you can either deactivate each VPN rule or issue a CI command, "ipsec
switch off" from SMT menu 24.8. You can get into SMT menu via either telnet or console connection. P-334WT may support both of them
in the future, please refer to the release note.