ZyWALL 5/35/70 Series User’s Guide
The following table describes the labels in this screen.
Table 15 VPN Wizard: Gateway Setting
LABEL | DESCRIPTION |
|
|
Gateway Policy |
|
Property |
|
Name | Type up to 32 characters to identify this VPN gateway policy. You may use any |
| character, including spaces, but the ZyWALL drops trailing spaces. |
My ZyWALL | When the ZyWALL is in router mode, enter the WAN IP address or the domain name |
| of your ZyWALL or leave the field set to 0.0.0.0. |
| For a ZyWALL with multiple WAN ports, the following applies if the My ZyWALL field |
| is configured as 0.0.0.0: |
| • When the WAN port operation mode is set to Active/Passive, the ZyWALL uses |
| the IP address (static or dynamic) of the WAN port that is in use. |
| • When the WAN port operation mode is set to Active/Active, the ZyWALL uses |
| the IP address (static or dynamic) of the primary (highest priority) WAN port to set |
| up the VPN tunnel as long as the corresponding WAN1 or WAN2 connection is |
| up. If the corresponding WAN1 or WAN2 connection goes down, the ZyWALL |
| uses the IP address of the other WAN port. |
| • If both WAN connections go down, the ZyWALL uses the dial backup IP address |
| for the VPN tunnel when using dial backup or the LAN IP address when using |
| traffic redirect. See the chapter on WAN for details on dial backup and traffic |
| redirect. |
| A ZyWALL with a single WAN port uses its current WAN IP address (static or |
| dynamic) in setting up the VPN tunnel if you leave this field as 0.0.0.0. If the WAN |
| connection goes down, the ZyWALL uses the dial backup IP address for the VPN |
| tunnel when using dial backup or the LAN IP address when using traffic redirect. |
| The VPN tunnel has to be rebuilt if this IP address changes. |
| When the ZyWALL is in bridge mode, this field is |
| ZyWALL’s IP address. |
Remote | Enter the WAN IP address or domain name of the remote IPSec router (secure |
Gateway | gateway) in the field below to identify the remote IPSec router by its IP address or a |
Address | domain name. Set this field to 0.0.0.0 if the remote IPSec router has a dynamic WAN |
| IP address. |
Next | Click Next to continue. |
|
|
3.4 VPN Wizard Network Setting
Two active SAs cannot have the local and remote IP address(es) both the same. Two active SAs can have the same local or remote IP address, but not both. You can configure multiple SAs between the same local and remote IP addresses, as long as only one is active at any time.
Chapter 3 Wizard Setup | 90 |