Figure 241 Menu 27.1.1 Ipsec Setup; Table 157 Menu 27.1.1 Ipsec Setup - ZyXEL Communications P-334WT User Manual

P-334WT User's Guide

Figure 241 Menu 27.1.1 IPSec Setup

Index #= 2
Active= Yes
Local ID type= IP
My IP Addr= 0.0.0.0
Peer ID type= IP
Secure Gateway Address= zwtest.zyxel.com.tw
Protocol= 0
Local:
Remote: Addr Type= SUBNET
Enable Replay Detection= No
Key Management= IKE
Edit Key Management Setup= No
The following table describes the fields in this menu.

Table 157 Menu 27.1.1 IPSec Setup

FIELD
Index
Name
Active
Keep Alive
Nat Traversal
Local ID type
380
Menu 27.1.1 - IPSec Setup
Name= example
Keep Alive= No
DNS Server= 0.0.0.0
Addr Type= SINGLE
Local IP Addr= 1.1.1.1
Port Start= 0
IP Addr Start= 4.4.4.4
Port Start= 0
Press ENTER to Confirm or ESC to Cancel:
DESCRIPTION
This is the VPN rule index number you selected in the previous menu.
Enter a unique identification name for this VPN rule. The name may be up to 32
characters long but only 10 characters will be displayed in Menu 27.1 - IPSec
Summary.
Press [SPACE BAR] to choose either Yes or No. Choose Yes and press [ENTER] to
activate the VPN tunnel. This field determines whether a VPN rule is applied before a
packet leaves the firewall.
Press [SPACE BAR] to choose either Yes or No. Choose Yes and press [ENTER] to
have the Prestige automatically re-initiate the SA after the SA lifetime times out, even if
there is no traffic. The remote IPSec router must also have keep alive enabled in order
for this feature to work.
Select this check box to enable NAT traversal. NAT traversal allows you to set up a
VPN connection when there are NAT routers between the two IPSec routers.
The remote IPSec router must also have NAT traversal enabled. You can use NAT
traversal with ESP protocol using Transport or Tunnel mode, but not with AH protocol
nor with Manual key management.
In order for an IPSec router behind a NAT router to receive an initiating IPSec packet,
set the NAT router to forward UDP port 500 to the IPSec router behind the NAT router.
Press [SPACE BAR] to choose IP, DNS, or E-mail and press [ENTER].
Select IP to identify this Prestige by its IP address.
Select DNS to identify this Prestige by a domain name.
Select E-mail to identify this Prestige by an e-mail address.
Nat Traversal= No
Content=
Content=
End= N/A
End/Subnet Mask= 255.255.0.0
End= N/A
Chapter 38 VPN/IPSec Setup