ZyWALL 2 Series User’s Guide

 

Table 14-7 Basic IKE VPN Rule Edit

 

 

LABEL

DESCRIPTION

 

 

Ending IP

When the Address Type field is configured to Single Address, this field is N/A. When the

Address/ Subnet

Address Type field is configured to Range Address, enter the end (static) IP address, in

Mask

a range of computers on the network behind the remote IPSec router. When the Address

 

Type field is configured to Subnet Address, enter a subnet mask on the network behind

 

the remote IPSec router.

 

 

DNS Server (for

If there is a private DNS server that services the VPN, type its IP address here. The

IPSec VPN)

ZyWALL assigns this additional DNS server to the ZyWALL's DHCP clients that have IP

 

addresses in this IPSec rule's range of local addresses.

 

A DNS server allows clients on the VPN to find other computers and servers on the VPN

 

by their (private) domain names.

 

 

Authentication Key

Pre-Shared Key

Select the Pre-Shared Key radio button and type your pre-shared key in this field. A pre-

 

shared key identifies a communicating party during a phase 1 IKE negotiation. It is called

 

"pre-shared" because you have to share it with another party before you can communicate

 

with them over a secure connection.

 

Type from 8 to 31 case-sensitive ASCII characters or from 16 to 62 hexadecimal ("0-9",

 

"A-F") characters. You must precede a hexadecimal key with a "0x” (zero x), which is not

 

counted as part of the 16 to 62 character range for the key. For example, in

 

"0x0123456789ABCDEF", “0x” denotes that the key is hexadecimal and

 

“0123456789ABCDEF” is the key itself.

 

Both ends of the VPN tunnel must use the same pre-shared key. You will receive a

 

“PYLD_MALFORMED” (payload malformed) packet if the same pre-shared key is not

 

used on both ends.

 

 

Certificate

Select the Certificate radio button to identify the ZyWALL by a certificate. This feature is

 

not available on the ZyWALL 2WE.

 

Use the drop-down list box to select the certificate to use for this VPN tunnel. You must

 

have certificates already configured in the My Certificates screen. Click My Certificates

 

to go to the My Certificates screen where you can view the ZyWALL's list of certificates.

 

 

14-16

VPN Screens