Keep Alive; Table 66 Vpn Summary - ZyXEL Communications P-334WT User Manual

P-334WT User's Guide
The following table describes the labels in this screen.

Table 66 VPN Summary

LABEL
#
Active
Local Addr.
Remote Addr.
Encap.
Algorithm
Gateway
Modify

12.6 Keep Alive

When you initiate an IPSec tunnel with keep alive enabled, the Prestige automatically
renegotiates the tunnel when the IPSec SA lifetime period expires
for more on the IPSec SA lifetime). In effect, the IPSec tunnel becomes an "always on"
connection after you initiate it. Both IPSec routers must have a Prestige-compatible keep alive
feature enabled in order for this feature to work.
If the Prestige has its maximum number of simultaneous IPSec tunnels connected to it and
they all have keep alive enabled, then no other tunnels can take a turn connecting to the
Prestige because the Prestige never drops the tunnels that are already connected.
168
DESCRIPTION
The VPN policy index number.
This field displays whether the VPN policy is active or not.
The icon is turned on when this VPN policy is active.
Click the edit icon under Modify and select the Active checkbox in the Rule
Setup screen to activate the VPN policy. Clear the checkbox to deactivate this
VPN policy without having to delete the entry.
This is the IP address of the computer on your local network behind your Prestige.
This is the IP address(es) of computer(s) on the remote network behind the
remote IPSec router.
A single (static) IP address is displayed when the Remote Address Start and
Remote Address End/Mask fields in the Rule Setup IKE (or Manual) screen are
both configured to the same IP address.
The beginning and ending (static) IP addresses, in a range of computers are
displayed when the Remote Address Start and Remote Address End/Mask
fields in the Rule Setup IKE (or Manual) screen are configured for a range of IP
addresses.
A (static) IP address and a subnet mask are displayed when the Remote Address
Start and Remote Address End/Mask fields in the Rule Setup IKE (or Manual)
screen are configured for a subnet.
This field displays 0.0.0.0 when the Secure Gateway Address field is set to
0.0.0.0. In this case only the remote IPSec router can initiate the VPN.
This field displays Tunnel or Transport mode (Tunnel is the default selection).
This field displays the security protocols used for an SA.
Both AH and ESP increase Prestige processing requirements and
communications latency (delay).
This is the static WAN IP address or URL of the remote IPSec router. This field
displays 0.0.0.0 when you configure the Secure Gateway Addr field in the Rule
Setup IKE screen to 0.0.0.0.
Click the Edit icon to open the rule setup screen. Modify a VPN policy or create a
new VPN policy in the Rule Setup screen.
Click the Remove icon to delete a VPN policy. When a VPN policy is deleted,
subsequent policies do not move up in the list.
(Section 12.2 on page 165
Chapter 12 VPN Screens