Chapter 25 IPSec VPN

Table 121 Configuration > VPN > IPSec VPN > VPN Gateway > Edit (continued)

LABEL

DESCRIPTION

Content

This field is read-only if the ZyWALL and remote IPSec router use

 

certificates to identify each other. Type the identity of the ZyWALL

 

during authentication. The identity depends on the Local ID Type.

 

IP - type an IP address; if you type 0.0.0.0, the ZyWALL uses the IP

 

address specified in the My Address field. This is not recommended

 

in the following situations:

 

• There is a NAT router between the ZyWALL and remote IPSec

 

router.

 

• You want the remote IPSec router to be able to distinguish

 

between IPSec SA requests that come from IPSec routers with

 

dynamic WAN IP addresses.

 

In these situations, use a different IP address, or use a different

 

Local ID Type.

 

DNS - type the domain name; you can use up to 31 ASCII

 

characters including spaces, although trailing spaces are truncated.

 

This value is only used for identification and can be any string.

 

E-mail- the ZyWALL is identified by an e-mail address; you can use

 

up to 31 ASCII characters including spaces, although trailing spaces

 

are truncated. This value is only used for identification and can be

 

any string.

 

 

Peer ID Type

Select which type of identification is used to identify the remote

 

IPSec router during authentication. Choices are:

 

IP - the remote IPSec router is identified by an IP address

 

DNS - the remote IPSec router is identified by a domain name

 

E-mail- the remote IPSec router is identified by an e-mail address

 

Any - the ZyWALL does not check the identity of the remote IPSec

 

router

 

If the ZyWALL and remote IPSec router use certificates, there is one

 

more choice.

 

Subject Name - the remote IPSec router is identified by the subject

 

name in the certificate

 

 

 

461

ZyWALL USG 2000 User’s Guide