ZyWALL 2 Series User’s Guide

Table 14-7 Basic IKE VPN Rule Edit

LABEL

DESCRIPTION

Local IP Address Enter a static local IP address. The local IP address must correspond to the remote IPSec router's configured remote IP addresses.

Site to Site

Select this radio button to establish a VPN between two sites (groups of IP addresses).

Address Type Use the drop-down menu to choose Range Address or Subnet Address. Select Range Address for a specific range of IP addresses. Select Subnet Address to specify IP addresses on a network by their subnet mask.

Starting IP When the Address Type field is configured to Range Address, enter the beginning Address (static) IP address, in a range of computers on your LAN behind your ZyWALL. When the

Address Type field is configured to Subnet Address, this is a (static) IP address on the LAN behind your ZyWALL.

Ending IP When the Address Type field is configured to Range Address, enter the end (static) IP Address/ Subnet address, in a range of computers on the LAN behind your ZyWALL. When the Address

Mask Type field is configured to Subnet Address, this is a subnet mask on the LAN behind your ZyWALL.

Remote:

Remote IP addresses must be static and correspond to the remote IPSec router's configured local IP addresses. The remote fields do not apply when the Secure Gateway Address field is configured to 0.0.0.0. In this case only the remote IPSec router can initiate the VPN.

Two active SAs cannot have the local and remote IP address(es) both the same. Two active SAs can have the same local or remote IP address, but not both. You can configure multiple SAs between the same local and remote IP addresses, as long as only one is active at any time.

Address Type

Use the drop-down menu to choose Single Address, Range Address, or Subnet

 

Address. Select Single Address with a single IP address. Select Range Address for a

 

specific range of IP addresses. Select Subnet Address to specify IP addresses on a

 

network by their subnet mask.

 

 

Starting IP

When the Address Type field is configured to Single Address, enter a (static) IP address

Address

on the network behind the remote IPSec router. When the Addr Type field is configured to

 

Range Address, enter the beginning (static) IP address, in a range of computers on the

 

network behind the remote IPSec router. When the Address Type field is configured to

 

Subnet Address, enter a (static) IP address on the network behind the remote IPSec

 

router.

 

 

VPN Screens

14-15