ZyXEL Communications P-202H V2 User Manual page 303

Table 100 Menu 27.1 IPSec Summary
FIELD
Local Addr
Start
Local Addr
End / Mask
Encap
IPSec
Algorithm
Key Mgt
Remote Addr
Start
Remote Addr
End / Mask
Secure GW
Addr
Chapter 33 VPN/IPSec Setup
When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to SINGLE, this is
a (static) IP address on the LAN behind your ZyXEL Device.
When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to RANGE, this is
the beginning (static) IP address, in a range of computers on the LAN behind your
ZyXEL Device.
When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to SUBNET, this
is a (static) IP address on the LAN behind your ZyXEL Device.
When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to SINGLE, this is
the same (static) IP address as in the Local Addr Start field.
When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to RANGE, this is
the end (static) IP address, in a range of computers on the LAN behind your ZyXEL
Device.
When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to SUBNET, this
is a subnet mask on the LAN behind your ZyXEL Device.
This field displays Tunnel mode or Transport mode. See earlier for a discussion of
these. You need to finish configuring the VPN policy in menu 27.1.1.1 or 27.1.1.2 if ???
is displayed.
This field displays the security protocols used for an SA. ESP provides confidentiality
and integrity of data by encrypting the data and encapsulating it into IP packets.
Encryption methods include 56-bit DES and 168-bit 3DES. NULL denotes a tunnel
without encryption.
AH (Authentication Header) provides strong integrity and authentication by adding
authentication information to IP packets. This authentication information is calculated
using header and payload data in the IP packet. This provides an additional level of
security. AH choices are MD5 (default - 128 bits) and SHA -1(160 bits).
Both AH and ESP increase the ZyXEL Device's processing requirements and
communications latency (delay).
You need to finish configuring the VPN policy in menu 27.1.1.1 or 27.1.1.2 if ??? is
displayed.
This field displays the SA's type of key management, (IKE or Manual).
When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to SINGLE, this is
a static IP address on the network behind the remote IPSec router.
When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to RANGE, this is
the beginning (static) IP address, in a range of computers on the network behind the
remote IPSec router.
When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to SUBNET, this
is a static IP address on the network behind the remote IPSec router.
This field displays N/A when you configure the Secure Gateway Addr field in SMT
27.1.1 to 0.0.0.0.
When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to SINGLE, this is
the same (static) IP address as in the Remote Addr Start field.
When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to RANGE, this is
the end (static) IP address, in a range of computers on the network behind the remote
IPSec router.
When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to SUBNET, this
is a subnet mask on the network behind the remote IPSec router.
This field displays N/A when you configure the Secure Gateway Address field in SMT
27.1.1 to 0.0.0.0.
This is the WAN IP address or the domain name (up to the first 15 characters are
displayed) of the IPSec router with which you are making the VPN connection. This field
displays 0.0.0.0 when you configure the Secure Gateway Address field in SMT 27.1.1
to 0.0.0.0.
P-202H Plus v2 User's Guide
DESCRIPTION
302