ZyXEL Communications P-793H User Manual page 168

Chapter 11 VPN
Table 42 Security > VPN > Setup > Edit
LABEL
Remote
Remote Address
Type
IP Address Start
End / Subnet
Mask
Address Information
Local ID Type
Content
168
DESCRIPTION
Specify the IP addresses of the devices behind the remote IPSec router
that can use the VPN tunnel. The remote IP addresses must correspond
to the remote IPSec router's configured local IP addresses.
Two active SAs cannot have the local and remote IP address(es) both
the same. Two active SAs can have the same local or remote IP
address, but not both. You can configure multiple SAs between the
same local and remote IP addresses, as long as only one is active at
any time.
Use the drop-down menu to choose Single, Range, or Subnet. Select
Single with a single IP address. Select Range for a specific range of IP
addresses. Select Subnet to specify IP addresses on a network by
their subnet mask.
When the Remote Address Type field is configured to Single, enter a
(static) IP address on the network behind the remote IPSec router.
When the Remote Address Type field is configured to Range, enter
the beginning (static) IP address, in a range of computers on the
network behind the remote IPSec router. When the Remote Address
Type field is configured to Subnet, enter a (static) IP address on the
network behind the remote IPSec router.
When the Remote Address Type field is configured to Single, this
field is N/A. When the Remote Address Type field is configured to
Range, enter the end (static) IP address, in a range of computers on
the network behind the remote IPSec router. When the Remote
Address Type field is configured to Subnet, enter a subnet mask on
the network behind the remote IPSec router.
Select IP to identify this P-793H v2 by its IP address.
Select DNS to identify this P-793H v2 by a domain name.
Select E-mail to identify this P-793H v2 by an e-mail address.
When you select IP in the Local ID Type field, type the IP address of
your computer in the local Content field. The P-793H v2 automatically
uses the IP address in the My IP Address field (refer to the My IP
Address field description) if you configure the local Content field to
0.0.0.0 or leave it blank.
It is recommended that you type an IP address other than 0.0.0.0 in
the local Content field or use the DNS or E-mail ID type in the
following situations.
When there is a NAT router between the two IPSec routers.
When you want the remote IPSec router to be able to distinguish
between VPN connection requests that come in from IPSec routers with
dynamic WAN IP addresses.
When you select DNS or E-mail in the Local ID Type field, type a
domain name or e-mail address by which to identify this P-793H v2 in
the local Content field. Use up to 31 ASCII characters including
spaces, although trailing spaces are truncated. The domain name or e-
mail address is for identification purposes only and can be any string.
P-793H v2 User's Guide