Table 23-3 Menu 27.1 - Ipsec Summary - ZyXEL Communications ZyXEL ZyWALL 50 User Manual

ZyWALL 50 Internet Security Gateway
FIELD
# This is the VPN policy index number.
Name This field displays the unique identification name for this VPN rule. The
name may be up to 32 characters long but only 10 characters will be
displayed here.
Y signifies that this VPN rule is active.
A
Local Addr This is the beginning IP address of the computers on your local network
Start behind your ZyWALL. This must be a static IP address.
Local Addr This is the end (static) IP address (in a range) of computers on your local
End network behind your ZyWALL.
Remote This is the beginning IP address of the computers on the remote network
Addr Start behind the remote IPSec router. This must be a static IP address.
Remote This is the end (static) IP address (in a range) of computers on the remote
Addr End network behind the remote IPSec router.
This field displays Tunnel mode or Transport mode. See earlier for a
Encap
discussion of these.
This field displays the security protocols used for an SA. ESP provides
IPSec
Algorithm confidentiality and integrity of data by encrypting the data and
encapsulating it into IP packets. Encryption methods include 56-bit DES
and 168-bit 3DES.
AH (Authentication Header) provides strong integrity and authentication
by adding authentication information to IP packets. This authentication
information is calculated using header and payload data in the IP packet.
This provides an additional level of security. AH choices are MD5 (default
- 128 bits) and SHA -1(160 bits).
Both AH and ESP increase the ZyWALL's processing requirements and
communications latency (delay).
Secure Gw This is the WAN IP address of the IPSec router with which you're making
Addr the VPN connection. If the peer has a dynamic WAN IP address, set this
field to 0.0.0.0. This may be useful for telecommuters initiating a VPN
tunnel to the company network. Only the telecommuter may initiate the
VPN tunnel in this case.
Select Press [SPACE BAR] to choose from None, Edit, Delete, Go To Rule,
Next Page or Previous Page and then press [ENTER]. You must select a
Command
rule in the next field when you choose the Edit, Delete or Go To
23-6
Table 23-3 Menu 27.1 — IPSec Summary
DESCRIPTION EXAMPLE
1
Taiwan
Y
192.168.1.35
192.168.1.38
172.16.2.40
172.16.2.46
Tunnel
ESP DES MD5
Public IP
address
None
VPN/IPSec Setup