ZyXEL Communications ZyWALL 5 User Manual page 191

LABEL
User Name Enter a user name for your ZyWALL to be authenticated by the VPN peer (in server
mode). The user name can be up to 31 case-sensitive ASCII characters, but spaces are
not allowed. You must enter a user name and password when you select client mode.
Password Enter the corresponding password for the above user name. The password can be up to
31 case-sensitive ASCII characters, but spaces are not allowed.
Local Policy
Local IP addresses must be static and correspond to the remote IPSec router's configured remote IP
addresses.
Two active SAs can have the same configured local or remote IP address, but not both. You can configure
multiple SAs between the same local and remote IP addresses, as long as only one is active at any time.
In order to have more than one active rule with the Secure Gateway Address field set to 0.0.0.0, the ranges of
the local IP addresses cannot overlap between rules.
If you configure an active rule with 0.0.0.0 in the Secure Gateway Address field and the LAN's full IP address
range as the local IP address, then you cannot configure any other active rules with the Secure Gateway
Address field set to 0.0.0.0.
Address Type Use the drop-down menu to choose Single Address, Range Address, or Subnet
Address. Select Single Address for a single IP address. Select Range Address for a
specific range of IP addresses. Select Subnet Address to specify IP addresses on a
network by their subnet mask.
Starting IP When the Address Type field is configured to Single Address, enter a (static) IP
address on the LAN behind your ZyWALL. When the Address Type field is configured to
Address
Range Address, enter the beginning (static) IP address, in a range of computers on your
LAN behind your ZyWALL. When the Address Type field is configured to Subnet
Address, this is a (static) IP address on the LAN behind your ZyWALL.
Ending IP Address/ When the Address Type field is configured to Single Address, this field is N/A. When
Subnet Mask the Address Type field is configured to Range Address, enter the end (static) IP
address, in a range of computers on the LAN behind your ZyWALL. When the Address
Type field is configured to Subnet Address, this is a subnet mask on the LAN behind
your ZyWALL.
Remote Policy
Remote IP addresses must be static and correspond to the remote IPSec router's configured local IP
addresses. The remote fields do not apply when the Secure Gateway Address field is configured to 0.0.0.0. In
this case only the remote IPSec router can initiate the VPN.
Two active SAs cannot have the local and remote IP address(es) both the same. Two active SAs can have the
same local or remote IP address, but not both. You can configure multiple SAs between the same local and
remote IP addresses, as long as only one is active at any time.
Address Type Use the drop-down menu to choose Single Address, Range Address, or Subnet
Address. Select Single Address with a single IP address. Select Range Address for a
specific range of IP addresses. Select Subnet Address to specify IP addresses on a
network by their subnet mask.
Starting IP When the Address Type field is configured to Single Address, enter a (static) IP
Address address on the network behind the remote IPSec router. When the Addr Type field is
configured to Range Address, enter the beginning (static) IP address, in a range of
computers on the network behind the remote IPSec router. When the Address Type field
is configured to Subnet Address, enter a (static) IP address on the network behind the
remote IPSec router.
VPN Screens
Table 13-7 Edit VPN Rule
DESCRIPTION
ZyWALL 5 Internet Security Appliance
13-11