What are Local ID and Peer ID? | ZyXEL Communications 2602HWL-DXA

Prestige 2602HWL-DxA Support Notes

What are Local ID and Peer ID?

Local ID and Peer ID are used in IKE phase 1 negotiation. It’s in FQDN(Fully Qualified Domain Name) format, IKE standard takes it as one type of Phase 1 ID.

Phase 1 ID is an identification for each VPN peer. The type of Phase 1 ID may be IP/FQDN(DNS)/Ueser FQDN(E-mail). The content of Phase 1 ID depends on the Phase 1 ID type. The following is an example for how to configure phase 1 ID.

ID type Content

------------------------------------

IP 202.132.154.1 DNS www.zyxel.com

E-mail support@zyxel.com.tw

Please note that, in Prestige, if "DNS" or "E-mail" type is choosen, you can still use a random string as the content, such as "this_is_Prestige". It's not neccessary to follow the format exactly.

By default, Prestige takes IP as phase 1 ID type for itself and it's remote peer. But if it's remote peer is using DNS or E-mail, you have to ajust the settings to pass phase 1 ID checking.

When should I use FQDN?

If yoour VPN connection is Prestige to Prestige, and both of them have static IP address, and there is no NAT router in between, you can ignore this option. Just leave Local/Peer ID type as IP, then skip this option.

If either side of VPN tunneling end point is using dynamic IP address, you may need to configure ID for the one with dynamic IP address. And in this case, "Aggressive mode" is recommended to be applied in phase 1 negotiation .

Is my Prestige ready for IPSec VPN?

IPSec VPN is available for Prestige since ZyNOS V3.50. It is free upgrade, no registration is needed.

By upgrading the firmware and also configurations (romfile) to ZyNOS V3.50, the IPSec VPN capability

176

All contents copyright (c) 2005 ZyXEL Communications Corporation.

Image 176

ZyXEL Communications 2602HWL-DXA manual What are Local ID and Peer ID?, When should I use FQDN?

Contents

Prestige 2602HWL-DXA Version Feb Prestige 2602HWL-DxA Support Notes Index Application Notes FAQ VoIP FAQ Prestige 2602HWL-DxA Support Notes Prestige 2602HWL-DxA Support Notes Prestige 2602HWL-DxA Support Notes Trouble Shooting 191 CLI Command List 218 All PCs must have an Ethernet adapter card installed Ethernet connection TCP/IP Installation TCP/IP ConfigurationFollow these steps to configure Windows TCP/IP Setting up the Prestige router Prestige 2602HWL-DxA Support Notes Web screen shown below takes PPPoE as the example Setup the Prestige as a Dhcp Relay What is Dhcp Relay? Setup the Prestige as a Dhcp Client Configure an Internal Server Behind SUA Introduction Service Port Number Configure a Pptp server Behind SUA Example 1723 Prestige 2602HWL-DxA Support Notes Using NAT / Multi-NAT How NAT works One to One Many to OneMany to Many Overload Many to Many No Overload Applying NAT in the SMT Menus Following table summarizes these typesNAT Type IP Mapping Direction Full Feature Field Options DescriptionNone SUA Only Address Mapping Sets and NAT Server Sets Configuring NATTable Applying NAT in Menu 4 and Menu Menu 15.1.1 Address Mapping Rules Set Name= SUA Field Description Option/Example SUA Field Description Option Following table describes the fields in this screen One-to-One,Many-to-One and Server types Prestige 2602HWL-DxA Support Notes Service Port Number Internet Access Only Prestige 2602HWL-DxA Support Notes Internet Access with an Internal Server Prestige 2602HWL-DxA Support Notes Type One-to-One Start= Menu 15.1.1 Address Mapping Rules Support Non NAT Friendly Applications Type Many-to-Many No Overload 192.168.1.10 NAT Type IP Mapping SUA/PAT About Filter & Filter Examples How does ZyXEL filter work? Filter Structure Filter Types and SUA Prestige 2602HWL-DxA Support Notes Menu Protocol and device rule cannot be active together Filter for blocking the web service Create a filter set in Menu Rule one for a. http packet, TCP06/Port number Rule 2 for b.DNS request, TCP06/Port number Rule 3 for c. DNS packet UDP17/Port number Configuration Create a filter set in Menu 21, e.g., set Filter Rules One rule for blocking all packets from this client Enter the client IP in this fieldAddr= field, for one workstation it is Set to Drop to drop all the packets from this client Before you Begin Detailed format of the Ethernet Version Configurations Key Settings Menu 3.1 General Ethernet Setup Input Filter Sets Filter for blocking the NetBIOS packets Action Not Matched= Check Next Rule Port # Comp= None TCP Estab= N/A More= No Log= None Menu 21.1.6 TCP/IP Filter Rule Filter # 1,6 Menu Filter Rules Summary Equal Rules Summary Using the Dynamic DNS Ddns Key Settings for using Ddns function Option Service Provider Active Host User Description Password Enable Wildcard Network Management Using Snmp Writes Get GetNextSet Trap ZyXEL Snmp Implementation WarmStart defined in RFC-1215 Configure the Prestige for Snmp Key Settings Using syslogPrestige Setup NMS managers Unix Setup Filter log L02 Call Terminated C02 Call Terminated ExamplePacket triggered log PPP Log Format SdcmdSyslogSend SYSLOGPPPLOG, SYSLOGNOTICE, String Using IP Alias What is IP Alias ? Dhcp Setup TCP/IP Setup Using Call Scheduling IP Alias Edit the Schedule sets in menu Select a Schedule Set number and give it a name Menu 26.1 Schedule Set Setup is as follows Enable DisableStart Date How Often Time Service in Prestige Using IP Multicast IP Multicast Setup Enable Igmp in Prestiges LAN in menu Enable Igmp in Prestiges remote node in menu Multicast Using Prestige traffic redirect You can deploy the backup gateway on LAN of PrestigeSMT Menu 2 WAN Backup Setup Traffic Redirect on LAN port Key Settings Using Universal Plug n Play UPnP What is UPnP UPnP Operations Using UPnP in ZyXEL devices Enable UPnP function in ZyXEL device Prestige 2602HWL-DxA Support Notes Prestige 2602HWL-DxA Support Notes Finally, your video conversation is achieved Infrastructure mode What is Infrastructure mode? Configuration Prestige Wireless using SMT Prestige 2602HWL-DxA Support Notes Configuration Wireless Station to Infrastructure mode Double click on the AP you want to associated with Wireless MAC address filtering MAC Filter Overview Key Settings Option Filter Action Prestige 2602HWL-DxA Support Notes WEP configuration Wired Equivalent Privacy Introduction Setting up the Access Point Key settings Access point will decrypt the data by its Key Setting up the Station Prestige 2602HWL-DxA Support Notes Prestige 2602HWL-DxA Support Notes Configuring Ieee 802.1x Introduction Supplicant AuthenticatorAuthentication Server Authentication Port State and Authentication Control Re-Authentication Eapol Exchange between 802.1x Authenticator and Supplicant Prestige 2602HWL-DxA Support Notes Prestige 2602HWL-DxA Support Notes If you use WEB Configuration Wireless Port Control= No Authentication Required Using Internal Authentication Server Key settings User Name Active PasswordIf you use WEB Configurator Enter a username up to 31 alphanumeric characters long Using External Radius Authentication Server Prestige 2602HWL-DxA Support Notes Key settings for authentication server User Name Active Server Address Port Shared Secret Site Survey Preparation Survey on Site Prestige 2602HWL-DxA Support Notes Pstn Lifeline Application Notes For Lifeline model only Usage of Pstn Lifeline Lifeline configuration Firgure 1 Splitter type How to connect Lifeline and DSL connectionRelay to Pstn VoIP Application Notes Setup SIP Account Account NumberLocal Port Password SetupReset Address SIP Server Preparation and Steps Peer to Peer callTopology Topology Explanation Setup--- Configuring SIP / VoIP related settings in device a Setup--- Configuring SIP / VoIP related settings in device B Prestige 2602HWL-DxA Support Notes Phone port settings Listening VolumeSpeaking Advanced voice settings configuration ActiveSupport Dialing Each fields detail description of the page is listed below SIP Account Timer Dtmf ModeURL Type Expiration Message WaitingIndication Time Each fields detail description of the page is listed below Speed Dial SIP NumberName Type Voice Vlan Voice QoS setupPriority Unconditional Forward to Number Call Forwarding setupVlan group to communicate with the SIP server Table Number Forward toUnconditional Busy Forward Number Setup section Waiting TimeActivate Incoming Call Incoming Call Number field Voice Common Settings Settings Call ServiceWhat is ZyNOS? Region How do I access the embedded web configurator? How do I upload or backup Romfile via web configurator? What is SUA? When should I use SUA? Why cant I make Telnet to Prestige from WAN?What should I do if I forget the system password? What is the difference between NAT and SUA? Why cant I configure device filters or protocol filters?How many network users can the SUA/NAT support? What are Device filters and Protocol filters? What is the Prestige Integrated Access Device? What is PPPoE?Will the Prestige work with my Internet connection? What do I need to use the Prestige? How do I know I am using PPPoE? Why does my provider use PPPoE?How can I configure the Prestige? Does the Prestige support PPPoE? What Dhcp capability does the Prestige support? Does Prestige support dynamic IP addressing?How does e-mail work through the Prestige? Default IP address is 192.168.1.1, Password How does the Prestige support TFTP?Can the Prestige support Tftp over WAN? How fast can the data go? What is Multi-NAT? When do I need Multi-NAT? What IP/Port mapping does Multi-NAT support? What is the difference between SUA and Multi-NAT? What is BOOTP/DHCP? What is DDNS? When do I need Ddns service? What does Lifeline mean? Do I need Lifeline? What is Voice over IP? Why use VoIP?Can I connect more than one phone on the phone port? Can I receive incoming Pstn call through P2602HWL- 6xC? What is the relationship between codec and VoIP? What is the difference between H.323 and SIP?What is voice quality? What advantage does Voice over IP can provide? What is codec? What is the relation of codec and VoIP?What codec does Prestige support? Which codec should I choose? Unable to register with the SIP server? Can register but can not establish a call? What is a network firewall? What makes Prestige firewall secure? What are the basic types of firewalls? What kind of firewall is the Prestige? What is Denials of Service DoSattack? What is Ping of Death attack?What is Teardrop attack? What is SYN Flood attack? What is Land attack? What is Brute-force attack?What is IP Spoofing attack? What are the default ACL firewall rules in Prestige? How can I protect against IP spoofing attacks? What is VPN? Can I override block or allow certain URLs by wording? Why do I need VPN? What is PPTP?Security Cost What secure protocols does IPSec support? What is L2TP?What is IPSec? What is SA? What is IKE?What is Pre-Shared Key? What is Phase 1 ID for? Is my Prestige ready for IPSec VPN? When should I use FQDN?What are Local ID and Peer ID? How do I configure Prestige VPN? What types of authentication does Prestige VPN support?How many VPN connections does Prestige support? What VPN protocols are supported by Prestige? Does Prestige support dynamic secure gateway IP? Does Prestige VPN support NetBIOS broadcast? Will ZyXEL support Secure Remote Management?Is the host behind NAT allowed to use IPSec? NAT Condition Supported IPSec Protocol Where can I configure Phase 1 ID in Prestige? How can I keep a tunnel alive? Can Prestige support IPSec passthrough? What is a Wireless LAN ? What are the advantages of Wireless LANs ? What is an Access Point ? What are the disadvantages of Wireless LANs ?Where can you find wireless 802.11 networks ? What is Ieee 802.11 ? What is 802.11b ?What is 802.11a ? What is 802.11g ? What is Wi-Fi ? Does the 802.11 interfere with Bluetooth devices ?Can radio signals pass through walls ? Is it possible to use products from a variety of vendors ? Whats the difference between a Wlan and a Wwan ? What is Ad Hoc mode ?What is Infrastructure mode ? How many Access Points are required in a given area ? What is Direct-Sequence Spread Spectrum Technology Dsss ?What is Frequency-hopping Spread Spectrum Technology Fhss ? Why the 2.4 Ghz Frequency range ? What is an Essid ? What is WEP ?What is the difference between 40-bit and 64-bit WEP ? What is a WEP key ? What are Insertion Attacks ? What is Wireless Sniffer ?Can the Ssid be encrypted ? What is Radius ? What is 802.1x ?What is AAA ? What is WPA ? What is WPA-PSK? Online Trace Example TCP TCP/IP RAW Data RAW Data Time 12387.260 sec 0xCA849B61 31244 Flags MAC Addr = 00A0C5921312 Network Type Offline Trace Destination MAC Addr Flags = 0x12 .A..S Size 247/ 96 Time 12865.120 sec Addr = 00A0C5591284 Debug PPPoE Connection Example- a trace with system crashes Prestige 2602HWL-DxA Support Notes Prestige 2602HWL-DxA Support Notes LAN/WAN Packet Trace Trace LAN packet Trace WAN packet Source MAC Addr 0080C84CEA63 Network Type 0x0800 TCP/IP 13067 Frame Type TCP Ethernet Header FA F0 @...y MAC Addr = 00A0C5012345 Network Type 0020 9B CLI Command List