ZyXEL Communications ZyWall USG 50-H Series User Manual page 72

Chapter 4 Wizard Setup
Figure 37 VPN Advanced Wizard: Step 2
The following table describes the labels in this screen.
Table 17 VPN Advanced Wizard: Step 2
LABEL
Rule Name
Site-to-site
Site-to-site with
Dynamic Peer
Remote
Access (Server
Role)
Remote
Access (Client
Role)
Back
Next
There are two phases to every IKE (Internet Key Exchange) negotiation – phase 1
(Authentication) and phase 2 (Key Exchange). A phase 1 exchange establishes an IKE SA
(Security Association).
72
DESCRIPTION
Type the name used to identify this VPN connection (and VPN gateway). You may
use 1-31 alphanumeric characters, underscores(
character cannot be a number. This value is case-sensitive.
Choose this if the remote IPSec router has a static IP address or a domain name.
This ZyWALL can initiate the VPN tunnel.
Choose this if the remote IPSec router has a dynamic IP address. Only the remote
IPSec router can initiate the VPN tunnel.
Choose this to allow incoming connections from IPSec VPN clients. The clients have
dynamic IP addresses and are also known as dial-in users. Only the clients can
initiate the VPN tunnel.
Choose this to connect to an IPSec server. This ZyWALL is the client (dial-in user)
and can initiate the VPN tunnel.
Click Back to return to the previous screen.
Click Next to continue.
_ ), or dashes (-), but the first
ZyWALL USG 50-H User's Guide