ZyWALL 2 and ZyWALL 2WE

 

Table 27-7 Basic IKE VPN Rule Setup

LABEL

DESCRIPTION

 

 

 

Enter the WAN IP address of your ZyWALL. The ZyWALL uses its current WAN IP

My IP Address

address (static or dynamic) in setting up the VPN tunnel if you leave this field as

0.0.0.0.

 

The VPN tunnel has to be rebuilt if this IP address changes.

 

 

 

Select IP to identify this ZyWALL by its IP address.

Local ID Type

Select DNS to identify this ZyWALL by a domain name.

 

Select E-mailto identify this ZyWALL by an e-mail address.

 

 

 

When you select IP in the Local ID Type field, type the IP address of your computer or

 

leave the field blank to have the ZyWALL automatically use its own IP address.

 

When you select DNS in the Local ID Type field, type a domain name (up to 31

 

characters) by which to identify this ZyWALL.

Local Content

When you select E-mailin the Local ID Type field, type an e-mail address (up to 31

 

characters) by which to identify this ZyWALL.

 

The domain name or e-mail address that you use in the Content field is used for

 

identification purposes only and does not need to be a real domain name or e-mail

 

address.

 

 

 

Type the WAN IP address or the URL (up to 31 characters) of the IPSec router with

 

which you're making the VPN connection. Set this field to 0.0.0.0 if the remote IPSec

Secure Gateway

router has a dynamic WAN IP address (the Key Management field must be set to

Address

IKE). The remote address fields do not apply when the Secure Gateway Address

 

field is configured to 0.0.0.0. In this case only the remote IPSec router can initiate the

 

VPN.

 

 

 

Select IP to identify the remote IPSec router by its IP address.

Peer ID Type

Select DNS to identify the remote IPSec router by a domain name.

 

Select E-mailto identify the remote IPSec router by an e-mail address.

 

 

27-10

VPN/IPSec Setup